earticle

영어

The recent introduction of information and communications technology (ICT) in the maritime sector has increased the number of contacts with external networks, increasing cybersecurity threats. Accordingly, the importance of cyber resilience to ships is being emphasized. The International Association of Classification Societies (IACS) emphasized holistic cyber resilience in its Unified Requirements (UR) E26, which lays out five functional elements and requirements for ships: identify, protect, detect, respond, and recover. However, UR E26 provides requirements but no practical techniques. This paper proposes a framework that integrates IACS UR E26 and the MITRE Cyber Resilience Engineering Framework (CREF) to provide a systematic way to enhance and manage ship cyber resilience. Since the proposed framework provides a practical description of the requirements of UR E26, it can be used for training cyber resilience response to ships and can improve cyber resilience through continuous improvements.