ICS security in maritime transportation

PDFResearch PaperDOT-VNTSC-MARAD-13-01DOT/MARAD/MAR-420MA31A100 \ubf LME07Maritime safetyMarine safetySecurityInfrastructureWater transportationShippingOcean shippingRisk assessmentSupply chain managementStakeholdersUnited StatesJohn A. Volpe National Transportation Systems Center (U.S.)Wallischeck, Eric YorkJohn A. Volpe National Transportation Systems Center (U.S.)United States. Maritime AdministrationAGR-SAFETY AND SECURITY-SAFETY AND SECURITYAGR-INFRASTRUCTURE-INFRASTRUCTURENTL-SAFETY AND SECURITY-SAFETY AND SECURITYNTL-SAFETY AND SECURITY-Marine SafetyNTL-MARINE/WATERWAYS TRANSPORTATION-Marine SafetyNTL-MARINE/WATERWAYS TRANSPORTATION-MARINE/WATERWAYS TRANSPORTATIONVolpe National Transportation Systems Center, Technical Reference CenterThe John A. Volpe National Transportation Systems Center was asked by the Office of Security of the Maritime Administration to examine the issue of industrial control systems (ICS) security in the Maritime Transportation System (MTS), and to develop a white paper based upon its findings for circulation amongst MTS stakeholders. In evaluating the issue, this paper first discusses the role of the MTS as part of the domestic and international transportation system and global supply chain, and provides examples of the economic impact of past natural and manmade disruptions to the MTS. It next explores the uses and applications of ICS throughout the MTS, identifies potential cybersecurity vulnerabilities of ICS, and provides examples of possible ICS failures and the potential impact on the MTS. Finally, the paper explores the issue in the context of Federal policy governing critical infrastructure, cybersecurity and supply chain resilience, and makes a number of recommendations that government agencies and the private sector might consider in order to mitigate the ICS security risks