CSSC 上海船舶研究设计院 CSSC Shanghai Ship Research and Design Institute
船舶网络安全 Ship cybersecurity
制造商：上海船舶研究设计院（SDARI） Manufacturer: Shanghai Ship Research & Design Institute (SDARI)
供应商：上海斯达瑞船舶海洋工程服务有限公司（SDARI全资子公司）
Supplier: Shanghai Starry Marine Engineering Services Co., Ltd. (a wholly-owned subsidiary of SDARI)
供应商：上海斯达瑞船舶海洋工程服务有限公司（SDARI全资子公司）
Supplier: Shanghai Starry Marine Engineering Services Co., Ltd. (a wholly-owned subsidiary of SDARI)
背景—船舶网络发展特点 Background—Characteristics of ship network development
1．船内 1. Inside the ship
此前各系统大部分是孤立的，无连接的。 Previously, most of the systems were siloed and disconnected.
随着信息化、数字化、智能化、自主化的趋势，各系统之间的连接越来越多、数据交互频繁。
With the trend of informatization, digitization, intelligence, and autonomy, there are more and more connections between various systems, and data interaction is frequent.
此前各系统大部分是孤立的，无连接的。 Previously, most of the systems were siloed and disconnected.
随着信息化、数字化、智能化、自主化的趋势，各系统之间的连接越来越多、数据交互频繁。
With the trend of informatization, digitization, intelligence, and autonomy, there are more and more connections between various systems, and data interaction is frequent.
2．船岸 2. Boat shore
20年前主要语音通信；近20年有限的数据传输（海事卫星发邮件）；当前与internet实时连接在线（微信、抖音、智能化船岸数据在线传输）
20 years ago, the main voice communication; Limited data transmission for nearly 20 years (Inmarsat mail); Currently connected to the Internet in real time (WeChat, Douyin, intelligent ship-to-shore data online transmission)
20年前主要语音通信；近20年有限的数据传输（海事卫星发邮件）；当前与internet实时连接在线（微信、抖音、智能化船岸数据在线传输）
20 years ago, the main voice communication; Limited data transmission for nearly 20 years (Inmarsat mail); Currently connected to the Internet in real time (WeChat, Douyin, intelligent ship-to-shore data online transmission)
背景—网络安全事件 Background—Cybersecurity incidents
CSSC
－2011年，＂耶沃利＂号油船从阿拉伯湾启程前往地中海，由于该轮的行程、货物
-In 2011, the oil tanker "Jevoli" sailed from the Arabian Gulf to the Mediterranean, due to the ship's itinerary and cargo
船员、地点以及有无武装警卫等各项信息被海盗雇佣的技术人员提前获悉，从而被海盗锁定并劫持；
The crew, location, and the presence or absence of armed guards were informed in advance by technicians hired by the pirates, so that they were locked and hijacked by the pirates;
－2011、2013年，安特卫普港的信息系统遭到网络攻击，货物数据被篡改，使得毒品走私计划得逞；
- In 2011 and 2013, the information system of the Port of Antwerp was attacked by cyber attacks, and cargo data was tampered with, which allowed drug smuggling plans to succeed;
－2014年，燃料供应商全球燃料服务公司（WFS）因被保险公司指控卷入一起网络攻击事件，付出了缴纳罚款约 1800 万美元的代价；
- In 2014, fuel supplier Global Fuel Services (WFS) paid a fine of approximately $18 million for being accused by an insurance company of being involved in a cyberattack;
－2015年，伦敦船东保赔协会发布消息称，船舶网络诈骗数量正日益增加，其中包括拦截船舶代理商的邮件，入侵其电子邮箱账号，以实施将原支付账户换成新的银行账户等计划；
-In 2015, the London P&I Club announced that the number of online scams on ships was increasing, including intercepting the emails of shipping agents, hacking their email accounts, and implementing schemes to replace their original payment accounts with new bank accounts.
－2017、2018年，Petya的网络病毒袭击全球，多家著名航运企业在全球多处办事机构及部分业务单元的IT系统因此出现故障，遭受重大损失。
-In 2017 and 2018, Petya's cyber virus struck the world, causing IT systems failures in many offices and some business units of a number of well-known shipping companies around the world.
-In 2011, the oil tanker "Jevoli" sailed from the Arabian Gulf to the Mediterranean, due to the ship's itinerary and cargo
船员、地点以及有无武装警卫等各项信息被海盗雇佣的技术人员提前获悉，从而被海盗锁定并劫持；The crew, location, and the presence or absence of armed guards were informed in advance by technicians hired by the pirates, so that they were locked and hijacked by the pirates;
－2011、2013年，安特卫普港的信息系统遭到网络攻击，货物数据被篡改，使得毒品走私计划得逞；
- In 2011 and 2013, the information system of the Port of Antwerp was attacked by cyber attacks, and cargo data was tampered with, which allowed drug smuggling plans to succeed;
－2014年，燃料供应商全球燃料服务公司（WFS）因被保险公司指控卷入一起网络攻击事件，付出了缴纳罚款约 1800 万美元的代价；
- In 2014, fuel supplier Global Fuel Services (WFS) paid a fine of approximately $18 million for being accused by an insurance company of being involved in a cyberattack;
－2015年，伦敦船东保赔协会发布消息称，船舶网络诈骗数量正日益增加，其中包括拦截船舶代理商的邮件，入侵其电子邮箱账号，以实施将原支付账户换成新的银行账户等计划；
-In 2015, the London P&I Club announced that the number of online scams on ships was increasing, including intercepting the emails of shipping agents, hacking their email accounts, and implementing schemes to replace their original payment accounts with new bank accounts.
－2017、2018年，Petya的网络病毒袭击全球，多家著名航运企业在全球多处办事机构及部分业务单元的IT系统因此出现故障，遭受重大损失。
-In 2017 and 2018, Petya's cyber virus struck the world, causing IT systems failures in many offices and some business units of a number of well-known shipping companies around the world.