There has been an unprecedented digitization drive in the industrial sector, especially in the maritime industry. The profusion of intelligent electronic devices and IOT-enabled cyber-physical systems (CPS) has helped in the efficient use of resources and increased convenience. CPS has enabled real-time remote command and control of industrial assets. Unlike the relatively isolated legacy systems, the intertwined nature of Information Technology(IT) and Operations Technology(OT) brought by Industry 4.0 has increased the complexity of the systems, thereby increasing the attack surface. This work explores the possible consequences of these attacks from a more holistic view, focusing on high-risk assets such as offshore oil rigs, offshore wind farms, and autonomous vessels. The attacks have become more aggressive with the proliferation of such technologies, disrupting the physical process, causing fire and explosion hazards, and endangering human life and environmental health. The possible attack scenarios, the attack vectors, and their physical consequences have been discussed from the perspective of personnel safety and health, along with known security breaches of such nature. To the best of the authors' knowledge, seldom has any work been done that accentuates the possible human and environmental impacts of such attacks.
翻译:工业领域,尤其是海事行业,正经历着一场前所未有的数字化浪潮。大量智能电子设备与物联网赋能的网络物理系统(CPS)促进了资源的高效利用并提升了便利性。CPS实现了对工业资产的实时远程指挥与控制。与相对孤立的传统系统不同,工业4.0带来的信息技术(IT)与运营技术(OT)的深度融合增加了系统的复杂性,从而扩大了攻击面。本研究从一个更为整体的视角探讨了此类攻击可能带来的后果,重点关注海上石油钻井平台、海上风电场和自主船舶等高危资产。随着此类技术的普及,攻击行为变得更具侵略性,会扰乱物理过程,引发火灾和爆炸危险,并危及人类生命与环境健康。本文从人员安全与健康的角度,结合已知的此类性质的安全漏洞,探讨了可能的攻击场景、攻击向量及其物理后果。据作者所知,目前极少有研究强调此类攻击可能对人类和环境造成的影响。