The Role of Information SecurityIn the enhancement of Maritime

Security

By: Dr. Ahmed Kassar

Arab Academy for Science, Technology and Maritime Transport

Introduction

Information security means protecting information and information system from unauthorized access, use, disclosure, disruption, modification or destruction. Information security is concerned with the confidentiality, integrity and availability of data regardless of the form the data may take: electronic, print, or verbal communication and others.

The Information Security Components

The Information Security Components

• Information confidentiality

• Information Integrity

• Information Availability

Easy Information Easy Targeting

Sensitive information

• Sensitive information might include timing (e.g.…departure, arrivals), location of the ship, routes (routes, charts and etc.), crew nationality, ship/port survey, assessments, designs and architecture, security plans and emergency procedures

Sources of Information

• Personnel sources

• Cryptographic, computer and satellites sources

The threat

• Piracy

• Armed robbery against ships

• Subversion

• Espionage

• Sabotage

• Terrorism

• Other threats

• Investigative journalism

• Criminals

• Disaffected or dishonest staff

• Computer Hackers

• Computer Viruses

The shortcomings of using AIS in VTS systems

• The shortcomings of using AIS in VTS systems

“Every Body See Everybody”

How information could be secured

• Personnel security

• Physical security

• Cryptographic and computer security

Recommendations• Shipping companies, port control stations and

reporting systems should put clear policies concerning information security, and every one at shore or onboard a ship should be aware of the negative outcomes of information release and the possible ways of breaches and penetrations. Moreover, everyone concerned should know how information release could be used negatively to threaten the company interests or the company fleet itself.

• The field of information security has grown and evolved significantly in recent years. As a career choice there are many ways of gaining entry into the field. It offers many areas for specialization including: securing network(s) and allied infrastructure, securing applications and databases,security testing, information systems auditing, business continuty planning and digital forensics science, to name a few.