The Port pilot scenario is focused on the maritime transport processes that support the Vehicle Transport Service (VTS) from Italy to Spain. In the Port pilot, the port of Valencia is the entity that seeks an assessment of the ICT processes and ICT assets of the VTS. In this context, the port of Valencia is designated by all VTS business partners via a Security Declaration and application Statement (SDA) to act as the administrator of the VTS and have full access to all the information provided in the CYRENE platform that concerns the SCS environment placing the role of the Supply Chain Service Provider (SCS-P), according to the CYRENE RCA methodology.

The scenario that was demonstrated during the Port pilot is based on SCS processes operated by the Port Community System (PCS) of the port of Valencia, which is used to exchange information among different SCS involved in the VTS port call requests.

Based on the pilot architecture, the scenario was defined to demonstrate the CYRENE main results including the platform and the RCA methodology. The scenario is the following:

An attacker aims to access the PCS server, a critical SCS asset that participates in the port calls-related supply chain service process of the VTS in order to shut down the port service and disrupt the port calls service.

1. The credentials of a PCS technician are published on the Dark Web, and it is available to the attackers
2. CYRENE platform detects the credentials publication through the Deep and Dark Web Crawler & Data Mining Service
3. The attacker uses the credentials to access the PCS server
4. An IP rule in Intrusion Detection System (IDS) detects the access
5. The security staff analyses the vulnerabilities in their systems through the CYRENE’s Dynamic Vulnerability Assessment and Testing System (DVATS)
6. The attacker stops the docker service to disrupt the port calls services
7. The service downtime is detected by EVERES which supports the CYRENE’s Data Protection and Management Layer
8. The VTS-P uses the CYRENE platform to conduct Risk Assessment on the SCS assets involved in the VTS process and requests from the Customs user, Terminal Operator, and Ship Agent (who interact with the compromised PCS asset for the VTS process execution) to participate in the risk and conformity assessment procedures, in order to review and explore the security of their cyber-dependent assets (presented above)