Shipboard NMEA Penetration Testing for Secure CBS Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a lack of specific penetration test methods for shipboard networks, which are unique and require consideration of distinct ship characteristics, and existing methods do not adequately protect critical systems from cyberattacks.
Innovation Solution
A shipboard NMEA protocol-based penetration test method and apparatus that performs packet capture and analysis to confirm NMEA communication, selects attack methods, generates and transmits attack data, and analyzes results, while an authentication method uses GPS and beacon management to control CBS access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If land-based penetration test methods are used for ships, then ICT and OT system security can be tested, but the specific characteristics of ship networks (NMEA protocol, marine communication systems) are not considered
Solution Approach 1:
The penetration test method is segmented into distinct phases: network connection, NMEA communication confirmation through packet capture and analysis, attack method selection, attack data generation, and result analysis. This segmentation allows the system to systematically address ship-specific characteristics while maintaining manageable test complexity
Solution Approach 2:
The system performs preliminary NMEA communication confirmation by capturing and analyzing packets before executing penetration attacks. This preliminary action identifies NMEA-specific protocols and characteristics, enabling the subsequent attack phase to be tailored to the actual ship network environment
2Reliability
If only ID and password authentication is used for CBS access, then simple authentication is provided, but security against compromised credentials and remote attacks is insufficient
Solution Approach 1:
The system introduces multiple intermediary authentication mechanisms between the CBS and the control system: location verification through GPS/beacon triangulation, device identification through device information exchange, and network protocol validation. These intermediaries add security layers without requiring complete system redesign
Solution Approach 2:
The system performs preliminary authentication checks before allowing CBS access: verifying device information, confirming location through beacon triangulation or GPS, and validating credentials. Only after these preliminary actions succeed is the CBS granted access to the control system
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed herein are a shipboard NMEA protocol-based penetration test method and apparatus and a method and apparatus for controlling access by a CBS in a ship. The NMEA protocol-based penetration test method and apparatus according to the present invention can perform simple and rapid NMEA protocol penetration test on a ship in consideration of distinct characteristics of a ship.