A FRAMEWORK FOR CYBER SECURITY RISK ASSESSMENT OF SHIPS

In maritime traffic, with the growing reliance on innovative ICT technologies, maritime cyber risk management to secure not only data, but as well as safe and reliable ship transport operations becomes increasingly important. This paper presents a framework for conducting general and comprehensive cyber risk assessment of ships to offer guidance for improving security level of cyber systems onboard ships. The assessment covers methods for identification of the both technical and administrative cyber threats and vulnerabilities, and relies on identification of ship cyber risk critical systems and assets. The vulnerability scanning and penetration testing as specific elements of ships cyber security assessment have been studied. The given methodology for cyber risk level determination is based on a qualitative approach to assessing risk.