Lloyd’s Register co-developing cybersecurity standards for ships

Co-developer Naval Dome says that its system is the first multi-layer cyber defense solution developed specifically for maritime applications.    Global engineering firm and maritime classification society Lloyd’s Register and Israel-based cyber security specialist Naval Dome are teaming up to establish standards and guidelines for maritime cyber defense, the two parties revealed Nov. 9.
   “The lack of guidelines and standards for creating a more secure maritime environment is the shipping industry’s Achilles’ heel,” Naval Dome CEO Itai Sela said. “The MoU (Memorandum of Understanding) we have signed with Lloyd’s Register will help create a more effective end-to-end solution for cyber defense.”
   Naval Dome has said that its system is the first multi-layer cyber defense solution developed specifically for maritime applications.
   Using intelligence agency security technology, Naval Dome’s device blocks internal and external cyber-attacks to provide maximum protection with minimal human intervention. It integrates with existing systems and software, providing real-time cyber alerts and blocks malicious files to prevent unauthorized access to critical systems and data.
   As part of the collaboration, Lloyd’s says it plans to carry out a series of pilot tests using Naval Dome’s cyber security software onboard a Register-classed vessel.
   “The objective is to establish standards around cyber defense in the maritime space, utilizing Naval Dome’s expertise,” Lloyd’s Register Vice President Ran Merkazy explained. “We will then test the system with our customers to make sure that it provides the requisite level of security without disruption to their systems and operations.
   Lloyd’s Register said that the primary reasons behind it selecting the Israeli company as its project partner were Naval Dome’s governmental level intelligence grade, along with a specific focus on maritime defense and a product that’s designed to minimize human interaction.
   “The company has the right credentials and an excellent understanding of the maritime intelligence sector to be able to provide the advice we need to develop concise and effective guidelines for preventing system and data security breaches at sea,” Merkazy added.
   Naval Dome has already successfully demonstrated a ship’s vulnerability to cyber-attacks, independent of the LR collaboration, the firm said.
   “Our software engineering team performed a series of cyber-attacks on live navigation systems, engines and other machinery control systems,” Sela explained. “The attack was able to shift the vessel’s reported position, mislead the radar display, turn on and disable machinery, and override the fuel control, steering and ballast systems.”
   In a second test using the Naval Dome software, the company carried out the same attack, but was unable to penetrate any of the ship’s systems, Sela said.