Simrad TV80 - Network Security

406388/B
23
Networksecurity
IfaTV80systemisconnectedtoalocalareanetwork,datasecurityisimportant.
EquipmentmanufacturedbyKongsbergMaritimeisfrequentlyconnectedtothevessel's
localareanetwork(LAN).Whenyouconnectacomputertoalocalareanetworkyouwill
alwaysexposethedataonthatcomputer.Allothercomputersconnectedtothesame
networkmaybeabletoaccessyourdata.Severalthreatsmayimmediatelyoccur:
•Remotecomputerscanreadthedata.
•Remotecomputerscanchangethedata.
•Remotecomputerscanchangethebehaviourofthecomputer,forexamplebyinstalling
unwantedsoftware.
Usually,twoparametersareusedtodenethethreatlevel:
1Thelikelihoodthatanyremoteconnectionwilldoanyoftheabove.
2Thedamagedoneifaremoteconnectionsucceedsdoingthis.
KongsbergMaritimehasnoinformationregardingthecompletesysteminstallationon
anyvessel.SystemsprovidedbyKongsbergMaritimeareregardedasstand-aloneofine
systems.Theyarestand-aloneeventhoughtheymaybeconnectedtoanetworkforsensor
interfacesand/ordatadistribution.
Note
NonetworksafetyapplicationsareinstalledonanyKongsbergMaritimecomputers.The
computersarethusnotprotectedagainstviruses,malwareorunintentionalaccessfrom
externalusers.
SecuringtheTV80systemitselfhasnomeaningunlessthereisapolicyinplacethatsecures
allcomputersinthenetwork.Thispolicymustincludephysicalaccessbytrainedandtrusted
users.Thecustomer/enduseroftheTV80systemwillalwaysbeinchargeofdeningand
implementingasecuritypolicy,andprovidingtherelevantnetworksecurityapplications.
Note
KongsbergMaritimewillnotacceptanyresponsibilityforerrorsand/ordamagescaused
byunauthorizeduseoraccesstotheTV80.
Introduction