Simrad EK80 - Network Security

394149/C
37
Networksecurity
IfaEK80systemisconnectedtotheship’slocalareanetwork,datasecurityisofvital
importance.
EquipmentmanufacturedbyKongsbergMaritimearefrequentlyconnectedtotheship's
localareanetwork(LAN).Connectinganycomputertoanetworkwillalwaysexpose
thedataonthatcomputertoallothercomputersconnectedtothesamenetwork.Several
threatsmayimmediatelyoccur:
•Remotecomputerscanreadthedata.
•Remotecomputerscanchangethedata.
•Remotecomputerscanchangethebehaviourofthecomputer,forexamplebyinstalling
unwantedsoftware.
Usually,twoparametersareusedtodenethethreatlevel:
1Thelikelihoodthatanyremoteconnectionwilldoanyoftheabove.
2Thedamagedoneifaremoteconnectionsucceedsdoingthis.
BecauseKongsbergMaritimehasnoinformationregardingthecompletesysteminstallation
onanyvessel,wecannotestimatethethreatlevelandtheneedfornetworksecurity.For
thisreason,wecannotacceptresponsibilityfornetworksecurity.Systemsprovidedby
KongsbergMaritimeareregardedasstand-aloneofinesystems,eventhoughtheymaybe
connectedtoanetworkforsensorinterfacesand/ordatadistribution.
Note
NonetworksafetyapplicationsareinstalledonanyKongsbergMaritimecomputers.The
computersarethusnotprotectedagainstviruses,malwareorunintentionalaccessfrom
externalusers.
SecuringtheEK80systemitselfhasnomeaningunlessthereisapolicyinplacethatsecures
allcomputersinthenetwork.Thispolicymustincludephysicalaccessbytrainedandtrusted
users.Thecustomer/enduseroftheEK80systemwillalwaysbeinchargeofdeningand
implementingasecuritypolicy,andprovidingtherelevantnetworksecurityapplications.
Note
KongsbergMaritimewillnotacceptanyresponsibilityforerrorsand/ordamagescausedby
unauthorizeduseoraccesstotheEK80.
SimradEK80