[PenTesting] Comprehensive List of Shipboard Systems in Commercial Vessels — With PenTest Attack Vectors and Cyber Risk Guide

Analyst / Contributor :
🔬 R&D Shipboard Systems Commercial Vessels Maritime 4.0

Comprehensive List of Shipboard Systems in Commercial Vessels

A detailed breakdown of all major navigation, power, safety, cargo, environmental, communication, and crew welfare systems found aboard modern commercial ships — including cyber risk relevance for each category

Captain Ethan
Captain Ethan
Maritime 4.0 · AI, Data & Cyber Security
LinkedIn : linkedin.com/in/shipjobs
Collaborator : Lew, Julius, Jin, Morgan, Yeon

Beyond the core navigation, power, safety, cargo, and crew welfare systems, modern commercial ships incorporate a wide range of specialized systems to optimize operations, improve efficiency, and comply with international maritime regulations. This reference covers seven major system categories, including advanced and auxiliary systems often overlooked — with cyber risk relevance noted for each, in the context of IACS UR E26/E27 compliance.

🧭 1. Navigation & Control Systems

📌 Core systems responsible for vessel control, automation, and positioning — primary targets under IACS UR E26 security zone requirements.
  • Integrated Bridge System (IBS) — Merges multiple navigation tools into a single console for improved operational efficiency.
  • GPS / GNSS Receiver — Primary positioning system using Global Navigation Satellite Systems (GPS, GLONASS, Galileo, BeiDou).
  • ARPA (Automatic Radar Plotting Aid) — Tracks targets and calculates CPA/TCPA for collision avoidance; integrated with radar.
  • Voyage Data Recorder (VDR) — The vessel's "black box" — records navigational and operational data for accident investigation (SOLAS Ch.V).
  • Automatic Identification System (AIS) — Transmits and receives vessel identity, course, and speed for collision avoidance and traffic monitoring.
  • ECDIS (Electronic Chart Display and Information System) — Digital navigation chart system; mandatory under SOLAS for most commercial vessels.
  • Speed Log System — Measures ship speed over water or ground using Doppler or electromagnetic sensors.
  • Echo Sounder (Depth Finder) — Detects underwater terrain depth to prevent grounding.
  • Rudder Angle Indicator — Displays real-time rudder position for accurate maneuvering.
  • Bow & Stern Thrusters — Lateral propulsion assist for docking and low-speed harbor maneuvering.
  • Stabilization System (Anti-Rolling Device) — Reduces rolling motion in rough seas using active fins or gyroscopic stabilizers.
🛑 GPS jamming / AIS spoofing / ECDIS chart manipulation ✅ Redundant systems · manual override · cyber monitoring

⚡ 2. Power & Energy Management Systems

📌 Systems providing continuous power supply, energy optimization, and emergency resilience — Power Management System (PMS) is a key UR E26 OT asset.
  • Power Management System (PMS) — Monitors and automatically manages generator load sharing, blackout prevention, and load shedding.
  • Alarm Monitoring System (AMS) — Centralized monitoring of all machinery alarms with watchkeeping automation capability.
  • High-Voltage Shore Connection (HVSC) / Cold Ironing — Connects vessel to shore power at berth, eliminating auxiliary engine emissions in port.
  • Hybrid Energy Storage System — Integrates battery storage (Li-ion or LTO) to supplement generator loads and reduce fuel consumption.
  • Electrical Load Management System — Dynamically distributes power to prevent overloading and improve distribution efficiency.
  • Emergency Power Distribution System — Ensures essential services (steering, GMDSS, fire detection) remain operational during main power failure.
  • Shaft Generator System — Converts main engine shaft rotation into auxiliary electricity, reducing generator fuel consumption at sea.
  • Waste Heat Recovery System (WHRS) — Recovers excess exhaust gas heat to generate steam or electricity (turbine-based).
  • Variable Frequency Drive (VFD) Systems — Optimizes electric motor speed for pumps, fans, and compressors to reduce hotel load.
🛑 Power outages · generator failure · PMS cyberattack → blackout ✅ Multiple power sources · redundant generators · network isolation

🧯 3. Safety, Security & Fire Protection Systems

📌 Systems designed to prevent, detect, and mitigate safety hazards — cyber compromise of fire detection or ESD represents a critical safety risk under SOLAS.
  • Gas Detection & Inert Gas System (IGS) — Detects hydrocarbon/toxic gas leaks and blankets cargo tank vapors with inert gas to prevent explosion (mandatory on tankers).
  • Emergency Shut Down System (ESD) — Automatically isolates fuel, cargo, or propulsion systems during critical failures or fire events.
  • Fire Detection & Alarm System (FDAS) — Smoke, heat, and flame detectors throughout all vessel zones with bridge annunciation.
  • Fixed Fire Suppression Systems (CO₂, Water Mist, HFC-227ea / FK-5-1-12) — Zone-specific suppression systems for cargo holds, engine rooms, and accommodation. Note: Halon 1301 phased out under the Montreal Protocol; modern alternatives are used.
  • Engine Room Water Mist System — High-pressure automatic misting for machinery space fire suppression.
  • Man Overboard Detection System — Infrared or radar-based detection for crew/passenger overboard incidents; integrates with AIS MOB marker.
  • Explosion-Proof Electrical Systems — Certified Ex-rated fittings in hazardous zones (tankers, gas carriers) to prevent ignition.
  • Piracy Protection System (Non-lethal) — Water cannons, LRAD (Long Range Acoustic Device), razor wire barriers, and enhanced CCTV for anti-piracy deterrence.
  • Ship Security Alert System (SSAS) — Silent distress alert to flag state authorities in piracy or security breach situations (SOLAS XI-2).
🛑 Equipment failure · false alarms · ESD/FDAS cyber manipulation ✅ Routine testing · redundant detection · regulatory compliance

📦 4. Cargo Handling & Tanker Systems

📌 Systems ensuring safe, efficient, and compliant cargo transportation — cargo management PLCs and sensor networks are core UR E27 equipment scope.
  • Cargo Management System (CMS) — Integrated software for tracking stowage plans, stability calculations, and cargo operations sequencing.
  • Tank Level Gauging System — Monitors liquid cargo levels in tanks using radar (TDR), servo, or pressure sensors. Radar-based gauging is standard on modern tankers.
  • LNG Fuel & Cargo System — Includes cryogenic cargo pumps, vapor recovery units (VRU), boil-off gas (BOG) management, and emergency shutdowns for LNG carriers.
  • Reefer Container Monitoring System — Tracks temperature, humidity, CO₂ levels, and security of refrigerated containers (reefer plugs) in real time.
  • Cargo Oil Heating & Circulation System — Steam or electric heating coils maintain cargo viscosity in crude oil and product tankers.
  • Ballast Water Management System (BWMS) — Treats ballast water to IMO D-2 standard (UV or electrochlorination) to prevent invasive species transfer.
  • Compressed Air Systems — Supplies pneumatic power for automated valves, deck machinery, and engine starting systems.
  • Ventilation & Gas Freeing Systems — Maintains safe atmospheric conditions in cargo holds and tanks (bulk carriers, tankers).
🛑 Cargo contamination · tank overflow · CMS data manipulation ✅ Redundant sensors · pressure relief valves · emergency shutdowns

🌱 5. Environmental Compliance & Waste Treatment Systems

📌 Systems supporting adherence to IMO MARPOL environmental regulations — EGCS (scrubber), BWMS, and OWS are subject to flag state and port state inspections.
  • Exhaust Gas Cleaning System / Scrubber (EGCS) — Reduces sulfur oxides (SOx) in exhaust to comply with IMO 2020 (MARPOL Annex VI, Reg. 14); open-loop, closed-loop, or hybrid types.
  • Selective Catalytic Reduction (SCR) System — Reduces nitrogen oxides (NOx) emissions using urea injection in diesel exhaust; required in NOx Emission Control Areas (NECAs).
  • Oily Water Separator (OWS) / Bilge Water Separator — Removes oil from bilge water to <15 ppm before overboard discharge (MARPOL Annex I).
  • Advanced Fuel Monitoring System (AFMS) — Tracks fuel consumption in real time; data submitted for IMO DCS (Data Collection System) reporting.
  • Sewage Treatment Plant (STP) — Processes black water and grey water to IMO standards before discharge (MARPOL Annex IV).
  • Incinerator System — Burns onboard solid and liquid waste (sludge, garbage) to reduce port waste reception volume (MARPOL Annex VI).
  • Carbon Capture System (CCS) — Emerging technology capturing CO₂ from engine exhaust; under development for CII compliance targets post-2030.
🛑 Non-compliance · equipment clogging · falsified ORB entries ✅ Routine maintenance · PSC readiness · automated logging

📡 6. Communication & IT Systems

📌 Facilitating onboard and shore-based communication, cybersecurity, and remote connectivity — the IT/OT boundary layer most exposed to external attack vectors.
  • GMDSS (Global Maritime Distress and Safety System) — Mandatory integrated distress and safety communication system (SOLAS Ch.IV); includes DSC, MF/HF/VHF radio, Inmarsat-C, and NavTex.
  • EPIRB (Emergency Position Indicating Radio Beacon) — Activates automatically on immersion; transmits vessel ID and position to COSPAS-SARSAT for SAR coordination.
  • Satellite Broadband (VSAT, LEO — Starlink Maritime, Inmarsat VSAT, Iridium Certus) — Provides high-speed internet and operational connectivity at sea.
  • Integrated Shipboard IT Network — Managed LAN/WLAN providing connectivity between ship systems and crew, with IT/OT zone separation.
  • Cyber Intrusion Detection & Prevention System (IDPS) — Monitors ship network traffic for unauthorized access, malware, and anomalous behavior.
  • Remote Ship Monitoring & Diagnostics (RSMD) — Allows shore-based technical teams and OEM vendors to assess machinery performance in real time over encrypted satellite links.
  • LRIT (Long Range Identification and Tracking) — Transmits vessel identity and position to flag state and coastal states every 6 hours (SOLAS V/19-1).
  • Ship-to-Shore Document Management System — Electronic exchange of port clearance, cargo manifests, and crew lists with port authorities (IMO FAL Convention).
🛑 Signal loss · VSAT hacking · AIS/LRIT data manipulation ✅ Encrypted comms · network segmentation · backup GMDSS

🏠 7. Crew Welfare & Habitability Systems

📌 Ensuring a livable, safe, and productive environment onboard — directly linked to human factors in cybersecurity awareness and incident response capability.
  • Crew Fatigue Monitoring System — Tracks work/rest hours per MLC 2006 and STCW requirements to prevent fatigue-related accidents and incidents.
  • Smart HVAC System — Adaptive heating, ventilation, and air conditioning in crew quarters with zone control and air quality monitoring.
  • Vibration & Noise Control Systems — Acoustic insulation and anti-vibration mounts to protect crew from continuous machinery noise exposure (ILO MLC standards).
  • Water Desalination System (Reverse Osmosis Plant) — Converts seawater to potable freshwater to WHO standards; primary freshwater source on most ocean-going vessels.
  • Onboard Medical System — Telemedicine capability, medical equipment lockers, and health monitoring for remote medical assistance at sea (MLC 2006, Reg. 4.1).
  • Crew Internet & Entertainment System — Satellite-based crew welfare internet (separate from operational VSAT) and onboard entertainment for long voyages.
  • Onboard Gym & Fitness Facilities — Supports crew physical and mental well-being on extended voyages (MLC 2006, Reg. 3.1).
🛑 Heat stress · dehydration · fatigue → human error in cyber response ✅ Psychological support · health monitoring · MLC compliance

🔴 PenTest Perspective — Attack Vectors by System Category

⚠️ Authorized Lab Use Only. The following attack vectors are documented for defensive research, penetration testing engagements, and IACS UR E26/E27 gap assessments on isolated lab environments or under written authorization from vessel owners. Never test on live operational systems.
🗺️ System → Attack Vector → PenTest Method → Defensive Fix
System Attack Vector PenTest Tool / Method Defensive Fix
ECDIS Malicious chart update via USB / network File integrity check bypass, payload in S-57 chart Signed chart updates, USB whitelist
AIS AIS spoofing — inject false vessel data GNU Radio + SDR (RTL-SDR) AIS frame injection Cross-validate AIS vs RADAR / LRIT
GPS / GNSS GPS spoofing — false position signal HackRF / USRP SDR GPS signal simulation Multi-constellation GNSS, dead reckoning backup
PMS / AMS Modbus write → forced blackout / false alarm Metasploit modbusclient / mbtget tool Modbus read-only firewall, network whitelist
VDR Data tampering / deletion of incident evidence FTP/SMB access if VDR on open network segment VDR on isolated VLAN, write-once storage
Cargo CMS SQLi on cargo portal → stowage plan manipulation SQLMap, Burp Suite on cargo web interface Parameterized queries, WAF, MFA on portal
VSAT / Satellite Unencrypted DVB-S2 traffic interception iDirect / VSAT sniffer, DVB-S2 demodulator TLS on all ship-to-shore traffic, VPN tunnel
Remote Access (SSH/RDP) Brute-force default credentials on bridge PC Hydra / Medusa with maritime default wordlist Key-based SSH, MFA, fail2ban, no default passwords
FDAS / ESD False alarm injection or suppression disable OT protocol fuzzing (Modbus/OPC-UA) on FDAS PLC Physical + logical isolation, read-only monitoring
🧪 Maritime PenTest Methodology — 5-Phase Approach
1
Reconnaissance — nmap -sS -A -p 502,4840,102,20000,80,22,3389 on ship LAN segments. Identify Modbus, OPC-UA, S7comm, DNP3 endpoints.
2
Vulnerability Scanning — nikto on web interfaces, openvas for network CVE scan. Focus on legacy Windows (XP/7) ECDIS workstations and unpatched OT controllers.
3
Exploitation — Metasploit modules for confirmed CVEs. SQLMap for cargo portals. Hydra for credential attacks. OT-specific: mbtget / ModbusPal for read/write Modbus coils (READ ONLY in authorized tests).
4
Lateral Movement — From IT (management server) to OT (PLC/HMI) pivot. Map cross-zone routing. Identify any IT-to-OT bridge with no firewall enforcement.
5
Report & Remediation Mapping — Map each finding to IACS UR E26/E27 control references. Rate by CVSS score. Propose compensating controls where patching is not feasible (as per OT patch management constraints).
🎯 MITRE ATT&CK for ICS — Key Tactics in Maritime Context
T0859 Valid Accounts T0866 Exploitation of Remote Services T0843 Program Download T0836 Modify Parameter T0826 Loss of Availability T0816 Device Restart/Shutdown T0856 Spoof Reporting Message T0885 Commonly Used Port
🔬 Key Takeaways — Future-Ready Vessel Systems
  • Enhanced Navigation & Power Management — Automated bridge systems (IBS, ARPA, ECDIS) and hybrid energy sources improve efficiency and reduce human error.
  • Stronger Safety & Security — Layered fire suppression, ESD, SSAS, and piracy deterrence protect crew, cargo, and the vessel structurally.
  • Eco-Friendly Operations — EGCS scrubbers, BWMS, OWS, and SCR systems ensure MARPOL and IMO 2030 regulatory compliance.
  • Cyber-Resilient Architecture — GMDSS, IDPS, VSAT encryption, and network segmentation form the communication security backbone for IACS UR E26/E27 compliance.
  • Improved Crew Experience — Smart HVAC, fatigue monitoring, and crew welfare internet directly support human performance and safety culture onboard.
#ShipboardSystems #MaritimeTechnology #IACSE26 #IACSE27 #OTSecurity #MARPOL #SOLAS #Maritime40 #SmartShip
Captain Ethan
Captain Ethan
Maritime 4.0 · AI, Data & Cyber Security

Maritime professional focused on the intersection of vessel operations, classification society regulations, and OT/IT cybersecurity. Writing for engineers, consultants, and operators navigating Maritime 4.0 together.

Comments

Post a Comment