Cyber security risk assessment for seaports: A case study of a container port. Issue 103 (April 2021)

• Record Type: Journal Article
• Authors: Gunes, Bunyamin; Kayisoglu, Gizem; Bolat, Pelin
• Is Part Of: Computers & security. Issue 103(2021)
• Publication Date: 2021-04
• Subjects: Cyber physical system -- Port cyber security -- Cyber security risk assessment; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2021.102196
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Seaports are fixed infrastructures of maritime transportation systems. Through Industry 3.0 and Industry 4.0, ports have faced with digital transformation based on networked cyber physical systems to be a part of smart and intelligent transportation systems. However, besides the advantages, this transformation has brought cyber security gaps and threats which can be resulted in breakdowns in maritime transportation domain. Therefore, port and port facilities should be prepared for cyber threats through holistic risk assessment frameworks for developing proactive actions. Based on these facts, this study has proposed to apply an integrated cyber risk assessment method for a container port with a cyber-physical perspective through analyzing four exemplary cyber-attack scenarios. For each cyber-attack scenario, risk assessment methodology has been applied using integrated cyber security management approach by taking into account the cyber physical assets of the container port. Results show that for the specified cyber threats, the risks have been evaluated non acceptable. Mitigation strategies have also been presented briefly in conclusion.