50
442703/B
Relatedtopics
Installationrequirements,page47
Networksecurity
IfaST90systemisconnectedtoalocalareanetwork,datasecurityisimportant.
EquipmentmanufacturedbyKongsbergMaritimeisfrequentlyconnectedtothevessel's
localareanetwork(LAN).Whenyouconnectacomputertoalocalareanetworkyou
willalwaysexposethedataonthatcomputer.Allothercomputersconnectedtothesame
networkmaybeabletoaccessyourdata.Severalthreatsmayimmediatelyoccur:
•Remotecomputerscanreadthedata.
•Remotecomputerscanchangethedata.
•Remotecomputerscanchangethebehaviourofthecomputer,forexampleby
installingunwantedsoftware.
Usually,twoparametersareusedtodenethethreatlevel:
1Thelikelihoodthatanyremotecomputerwilldoanyoftheabove.
2Thedamagedoneifaremotecomputersucceedsdoingthis.
KongsbergMaritimehasnoinformationregardingthecompletesysteminstallationon
anyvessel.SystemsprovidedbyKongsbergMaritimeareregardedasstand-aloneofine
systems.Theyarestand-aloneeventhoughtheymaybeconnectedtoanetworkfor
sensorinterfacesand/ordatadistribution.
Note
NonetworksafetyapplicationsareinstalledonKongsbergMaritimecomputers.The
computersarethereforenotprotectedagainstviruses,malwareorunintentionalaccess
byexternalusers.
SecuringtheST90systemitselfhasnomeaningunlessthereisapolicyinplacethat
securesallcomputersinthenetwork.Thispolicymustincludephysicalaccessbytrained
andtrustedusers.Thecustomer/enduseroftheST90systemwillalwaysbeincharge
ofdeningandimplementingasecuritypolicy,andprovidingtherelevantnetwork
securityapplications.
Note
KongsbergMaritimewillnotacceptanyresponsibilityforerrorsand/ordamagescaused
byunauthorizeduseoforaccesstotheST90.
SimradST90InstallationManual