¶ Challenge: Securing Vessels Against Increasingly Sophisticated Threats
The Maritime industry is the lifeblood of the global economy, accounts for ~90% of trade, and is highly connected with industrial control systems (ICS) and satellite communications. Its economic importance and increasingly digital infrastructure have made it an attractive target for hackers. Securing vessel control systems and networks while providing access for the crew can be a challenge when everything is connected, and air gaps are a thing of the past. Real-time monitoring, encryption, network segmentation/isolation, access control, and threat protection are just some of the capabilities required to keep a vessel digitally secure. All of this must happen without major changes to the vessels infrastructure or control system and minimal management overhead of the solution.
¶ Solution: Exium’s Secure Access Services Edge (SASE) with Zero-trust for Maritime
Exium’s SASE platform can secure vessel networks using the latest cybersecurity including zero-trust network access. The solution is easily deployed using a Software Cyber Gateway that runs on the vessel, segments and secures on-board networks, and provides a secure path to Exium’s cloud based CyberMesh. The gateway can keep on-board traffic separated from each other and provide complete inspection and policy enforcement for any traffic leaving or coming to the vessel.
¶ Benefits: On-board network security with zero-trust access
Exium’s solution protects the vessel’s networks and control systems by segmenting networks (keeping crew traffic completely isolated from control systems traffic, for example), implementing zero-trust network access control for on-board and remote users, enforcing security policies, and inspecting all traffic for threats and intrusions. While users can access Internet websites and apps, the vessel networks and on-board devices are not visible to the Internet as all traffic is proxied by Exium’s CyberMesh. Importantly, the solution is easy to deploy and manage.