{"id":48371,"date":"2022-09-09T14:00:00","date_gmt":"2022-09-09T14:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/attacks-breaches\/why-ports-are-at-risk-of-cyberattacks"},"modified":"2022-09-09T14:00:00","modified_gmt":"2022-09-09T14:00:00","slug":"why-ports-are-at-risk-of-cyberattacks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/why-ports-are-at-risk-of-cyberattacks\/","title":{"rendered":"Why Ports Are at Risk of Cyberattacks"},"content":{"rendered":"
<\/div>\n

Evidence indicates that the world’s ports are returning to pre-pandemic levels. During the first 11 months of 2021, the value of US international freight increased by more than 22%<\/a> (PDF) compared with the same 11 months in 2020. More freight means more ships docking at port. And not only are more ships docking, but their dwell times are increasing as well. The average container vessel dwell time<\/a> at the top 25 US container ports was estimated at 28.1 hours in 2020. In the first half of 2021, average container vessel dwell times increased to 31.5 hours. <\/p>\n

While this increase in activity is undoubtedly welcome, more docked ships bring a new challenge. The longer a ship is docked, the more vulnerable the port is to a cyberattack.<\/p>\n

The Cyber-Risk to Ships<\/h2>\n

The maritime industry is especially vulnerable to cyber incidents. There are multiple stakeholders involved in the operation and chartering of a ship, which often results in a lack of accountability for the IT and OT system infrastructure and the ship’s networks. The systems may rely on outdated operating systems that are no longer supported and cannot be patched or run antivirus checks.<\/p>\n

Going forward, this threat is expected to increase. Critical ship infrastructure related to navigation, power, and cargo management has become increasingly digitized and reliant on the Internet to perform a broad range of legitimate activities. The growing use of the Industrial Internet of Things (IIoT) will increase the ships’ attack surface. <\/p>\n

Common ship-based cyber vulnerabilities include the following:<\/p>\n