Guest speaker: Nigel Hearne, Cyber Security Specialist, Pen Test Partners

Abstract

Having managed cyber security testing projects on various vessels, from drilling and exploration rigs, to container ships and commercial vessels, through to cruise liners we have found a system installed that no one on board really knew about or understood. We also often find issues with how satcoms are enabled, allowing attackers access to other IT and then OT systems. Add the basic flaws we’ve found with ECDIS systems and have all we need to “hack” a ship. This presentation will walk you through how an attacker could abuse systems and human errors to wreak havoc at sea.

This lecture will be hosted by Ian Bramson, Chair of the IMarEST's Cyber Risk Management SIG (Special Interest Group).

Brief history of Stanley Gray lecture series

The IMarEST Stanley Gray Lectures (and the annual Stanley Gray Awards) are named in memory of Stanley Gray who was the Chief Mechanical Engineer at the Port Directorate of Basra during the 1950s & 60s. When he died in 1973 he left half his estate to be held by the Institute in trust to create the Stanley Gray Fund. He expressed the wish that the money should be awarded via a scholarship or prize to wherever the Institute saw distinction in Marine Engineering. This remit has been expanded following due process to include Marine Science and Technology. The Stanley Gray Series of prestige lectures, launched in 2002, is held to mark his generosity to, and patronage of the Institute.

How to watch

Events live streamed on IMarEST TV are open to anyone, including members and non-members, however, you will need an IMarEST Web account in order to watch.

Sign up for one here, and then log in to IMarEST TV at the time of the lecture to watch.

We recommend watching the live-stream using a computer, in order to view both the video of the speaker and their presentation.

If you wish to be reminded about this live stream and receive the direct link to watch the lecture, please register your interest on Eventbrite.