Maritime Cyber Security: Navigation and Ships’ Systems Maritime Cyber Security Roundtable Discussion Presented by The Combined Joint Operations from the Sea Centre of Excellence and Old Dominion University CAPT David B. Moskoff, USMS Professor of Marine Transportation United States Merchant Marine Academy Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Location, Technology and E-Navigation “Location” through precise positioning more important than ever due many new factors: Larger ships more cargo more $ at risk Faster ships less reaction time, more area Crew Size watch standers, fatigue, solo, safety W/O Load info+, technology – i.e. GMDSS Deeper Draft less UKC, bottom surveys Technology skillsets/instincts dependency Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

EMMA MAERSK 170,974 GT 397 m (1,302 ft) 56 m (184 ft) 15.5 m (51 ft) For Example: Largest Container Ship (in 2006) EMMA MAERSK 170,974  GT 397 m (1,302 ft) 56 m (184 ft) 15.5 m (51 ft) Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Ship’s E-Nav Bridge Equipment Technology Recently Much More Sophisticated ECDIS (Electronic Chart Display and Information System) AIS (Automatic Identification System) LRIT (Long Range Identification and Tracking) Radar/ARPA (Automatic Radar Plotting Aid) Compass (Gyro, Fluxgate, GPS and others) Steering (Computerized Automatic Steering System) VDR (Voyage Data Recorder –”Black Box”) GMDSS (Global Maritime Distress and Safety System) Numerous other advanced units and systems Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS Definition An Electronic Chart Display and Information System is: computer-based navigation system-complies with IMO can be used as an alternative to paper navigation charts integrates a variety of real-time information automated decision aid - continuously determining ship’s position in relation to land, charted objects, navigation aids and unseen hazards Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS Definition An ECDIS includes electronic navigational charts (ENC) and integrates position information from the Global Positioning System (GPS) and other navigational sensors, such as radar, fathometer and automatic identification systems (AIS). It may also display additional navigation-related information, such as sailing directions. Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS Electronic Chart Display and Information System Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS Electronic Chart Display and Information System Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

AIS (Automatic Identification System) Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

AIS (Automatic Identification System) Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

AIS (Automatic Identification System) Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS with AIS Overlay Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

AIS Symbols and Information Note TCPA and CPA Above – Based on GPS Position Input Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Shipboard Radar/ARPA Unit Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Marine Radar Display - Sperry Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

ECDIS with Radar Overlay Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Combining All Three on One Display The ECDIS becomes the ultimate “Magic Box” that is an extremely valuable tool for the well-trained navigator when position input is accurate. Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

AIS and Radar Overlay on ECDIS Integrated with Compass, Depth and other sensors Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

IBS (Integrated Bridge System) Solo Watchstanding Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Recent Technology Onboard Ships The Good The Bad The Ugly CSL Thames Grounding: Not Enough ECDIS Training ttp://www.youtube.com/watch?feature=endscreen&v=2m4JGoJZESs&NR=1 http://www.ntsb.gov/news/events/2009/san_francisco_ca/animation.html Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Important E-Navigation Terms PNT – Positioning, Navigation and Timing GPS – NavStar (U.S. Air Force) – Universal use DGPS - Differential Global Positioning System GNSS – Global Navigation Satellite System RSNS - Regional Satellite Navigation Systems GLONASS (Russia), Galileo (EU), Compass (China) Beidou (China), QZSS (Japan), IRNSS (India) Electronic Charts, ECDIS/ECS, Track Control, AIS, LRIT, IBS, LF, Loran C and Enhanced Loran (eLoran) Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

GPS/GNSS is an ENav Concern ECDIS [and AIS] Position Input Commercial Ships – C/A Code Primary and Secondary Inputs Typically from GPS/GLONASS Today Galileo and Compass in Future LF System - eLoran as Backup Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

THV GALATEA – Lighthouse Tender Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

THV GALATEA – Lighthouse Tender Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

…..from article by David Hambling on THV GALETEA ….When Last activated the jammer, the ship went haywire. According to the electronic display on the ship's bridge, the Galatea was suddenly flying at Mach speeds over northern Europe and Ireland. The ship's navigation backup - its gyrocompass- crashed, because it uses GPS to provide corrections. The radar did the same. Even the ship's satellite communications failed, because GPS points the antenna in the right direction. "The crew were well trained and briefed, so they knew what was going on," says Last. "But, like us, they were surprised.“ http://www.gla-rrnav.org/radionavigation/gnss_dgnss/vulnerabilities.html Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

GPS/NavStar – The U.S. Satellite System Some Known Vulnerabilities of GPS/GNSS Systems: Low power signal strength - inherent weakness Potential for unintentional interference Potential for intentional jamming or interference Potential for spoofing (hacking) and meaconing Potential for EMP to destroy receiver electronics Technical failure(s) of satellites (constellation) Exposure of satellites to kinetic or laser attacks http://www.youtube.com/v/Uk7DVpCkgwQ&hl=en Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

High Power Mobile Phone & GPS(L1)/WiFi/Bluetooth Signal Jammer http://www.alibaba.com/product-gs/386981063/EST_808LC_Portable_Military_blocker.html High Power Mobile Phone & GPS(L1)/WiFi/Bluetooth Signal Jammer Output power is 320 watt. The shielding radius is from 300-500 meters... Model Number: KTC-VU Jammer 2.0 Pelican Min. Order: 5 Pieces Port: Shenzhen Supply Ability: 50 Pieces per Day Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Why Conduct Intentional Activities. A Why Conduct Intentional Activities? A. PNT Signal is Critical to Infrastructure Criminals – PNT regulates Banking and Finance Hackers – Government, IT, Defense, Commercial Terrorists - Defense, Government, Energy, IT, Communications, Nuclear Industry, Banking, Transportation, Water, Chemical, Agriculture and Food, Emergency Services, Finance, more Extremists - ?????????????????????????? Military – Electronic Warfare (EW) & Cyber Pirates – Hijack Ship, Ground Ship, Steal Cargo Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Examples: Other ENav/GPS Concerns ECDIS is a Computer Subject to Viruses, etc. IT Attacks Against Ship (i.e. Spearfishing) http://www.transas.com/support/chart_corrections/ http://www.transis.com/support/chart_corrections/ Military Using Commercial GPS – C/A Code http://www.youtube.com/watch?v=fVxDVUsiejQ&feature=related Lack of Low Frequency(LF) eLoran-Type Backup Electromagnetic Pulse Attack (EMP) Kills All? Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Quick Look at GPS and eLoran GPS: Weak Transmitting Signal Strength High Frequency Bands – L1, L2, L5 Satellite Based – High Orbiting Fairly Easy to Jam/Spoof eLoran: Powerful Transmitting Signal Strength Low Frequency Band – 100 KHz Terrestrial Based – Secure Stations Virtually Impossible to Jam/Spoof Both: Very High Accuracy Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

eLoran – The Terrestrial System Enhanced Loran (eLoran) What is it? How does it work? What are its benefits? How much would it cost? Why isn’t everyone funding it? What’s the current status? Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Maritime Cyber Security: Navigation and Ships’ Systems CAPT D Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

What Can Ships Do? Options? Use GPS/GNSS receivers (+$15) that detect spoofing and jamming to warn users. Provide as many inputs to navigation positioning as possible – i.e. LF eLoran - especially in coastal/shallow areas. Use Parallel Indexing and Cross Indexing Radar Techniques routinely. Use ECDIS/ECS units with both a primary and a secondary input at all possible times in all available areas. Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

What Can Ships Do? Options? Maintain Skillsets: Piloting, Celestial, Instruments (fathometer, fathograph) Audit and Test ships for jamming and other vulnerabilities: test in open water areas under controlled conditions. Conduct ship drills (like fire drills) on regular basis: consider GNSS failure, GNSS jamming, GNSS spoofing, equipment failures, EMP attack, etc. Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Just Don’t Put All Your Eggs in One Basket Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

United States Merchant Marine Academy Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED

Questions? Comments? Discussion? CAPT David B. Moskoff, USMS Professor of Marine Transportation United States Merchant Marine Academy Master Mariner – USCG Unlimited moskoffd@usmma.edu 516.726.5856 Maritime Cyber Security: Navigation and Ships’ Systems CAPT D. Moskoff 2 May 2014 for CJOS/ODU - UNCLASSIFIED