COC Class 1&2

Navigation -2

ENA Cyber Disruption

Anil Varma
Singapore Maritime Academy
Singapore Polytechnic
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2

External methods of disruption and intrusion

on ENA, via a cyber attack are recent
possibilities. These could be as follows …….

• Virus intrusion via shipboard communication systems or

memory sticks
• Targeted Cyber Attack on shipboard computer systems
• Hacking of Shore Navigation Systems resulting in sensor
failure on-board
• Jamming of Navigational Signals such as that of GPS
• Spoofing of GNSS Signals
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Virus intrusion via shipboard communication
systems or memory sticks

How ? : These could occur if the “communication-boxes”

installed by communication service providers do not have strong
“fire-walls” to prevent such attacks. Virus could enter ship board
systems if we use infected memory sticks.
Systems affected : Mainly ECDIS, VDR …. while downloading
corrections, or using infected memory sticks or via INMARSAT
equipment if they are connected to external sources.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Targeted Cyber Attack on shipboard computer
systems

How ? : “Com-boxes” installed by communication service

providers do not have strong “fire-walls” to prevent such attacks.

Systems affected : Mainly ECDIS and VDR data, if they are

directly connected to external computer systems such as
shipping company shore side servers.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Hacking of Shore Navigation Systems resulting in
sensor failure on-board
How ? : Due to an external attack on shore-based navigational
systems which “feed” the ship systems, or if the service
providers or “official Government sources” do not have strong
“fire-walls” to prevent such attacks.
Viruses could also infect these systems.
Systems affected : ECDIS which are provided downloadable
ENC corrections from shore-based servers.
AIS broadcasts could also be affected if the AIS Base Stations
are hacked.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Hacking of Shore Navigation Systems resulting in
sensor failure on-board

GNSS Hack
INMARSAT Hack
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Hacking of Shore Navigation Systems resulting in
sensor failure on-board
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Jamming of Navigational Systems
How ? : These could occur if an external source does a
deliberate “jamming” of Navigational Signals broadcast. This is
possible because the transmitted signals of say … GNSS are
weak and their frequencies are known.

Systems affected : Mainly GNSS systems such as GPS,

GLONASS etc. This will in-turn deny positional and speed data
to all other Navigational Aids such as ECDIS, AIS, Radar etc.
which are connected via the NMEA network and/or NMEA buffer.
LRIT systems will also be directly affected.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Jamming of Navigational Systems
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Spoofing of GNSS Signals
How ? : This is malicious cloning of GNSS signals with an
intention to deceive the GNSS users. The GNSS Receivers are
not able to differentiate the real and cloned signals and the
signals are able to “fool” the vessel and the user into believing
that the vessel is at another location or off course.
Systems affected : GNSS Receivers such as GPS, GLONASS,
BEIDOU etc. and these in turn will affect the other Navigation
systems which take input from these sensors.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Spoofing of GNSS Signals
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2
Navigational Aids that could be affected
Spoofing of GNSS Signals
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2

Precautions to ensure that you are not affected

by the “loss” or “infection” of sensor inputs.
• First of all, ship’s officers must be aware and well trained in
“cyber security” requirements and do not use unauthorised
memory sticks or CDs/DVDs that could infect the systems.
• Ensure that all entry ports that lead to Navigation systems
must be well protected by efficient fire-walls.
• Vessel must have good ISM based procedures on cyber
security.
 ENA Disruption
COC Class 1&2 (by external means)
Navigation -2

Precautions to ensure that you are not affected

by the “loss” or “infection” of sensor inputs.
• Watch-keepers must not be dependent on a single system
for positional data and must continuously compare and
monitor their position using alternative methods.
• During coastal passage, it may be appropriate to use other
alternative methods of position fixing such as parallel
indexing, manual fixes and range fixing using Radar.
• Watch keepers must be aware of which electronic based
navigational systems could be affected and take appropriate
precautions as per ISM based Emergency Procedures.
COC Class 1&2
Navigation -2