The urgent need for cyber-physical resilience in critical infrastructure – Academia – The Jakarta Post

This incident served as a stark reminder of Indonesia’s vulnerability to cyber threats, which are expected to increase in frequency and sophistication in the coming years.

Ransomware attacks on information technology (IT) systems are increasingly common. A notable example is the 2017 NotPetya attack on Maersk, which disrupted the company’s global network within hours, resulting in losses of approximately $300 million and highlighting the maritime sector’s vulnerability to cyber threats.

This susceptibility was further accentuated by subsequent incidents, such as the January 2023 ransomware attack on DNV that affected 1,000 vessels, and the April 2023 attack that compromised the industrial control systems of US Navy contractor Fincantieri Marine Group, emphasizing the critical need for enhanced cybersecurity measures across industrial sectors.

In recent years, cyberattacks have evolved beyond targeting IT systems to focus on operational technology (OT) as well. For instance, attacks on sensor systems like GPS spoofing and LiDAR jamming can compromise navigation systems.

A cyberattack incident in June 2024 involved mass automatic identification system (AIS) spoofing in the Black Sea, where nearly 50 vessels broadcast their locations as Simferopol International Airport in Crimea and around 30 vessels broadcast their locations as Gelendzhik Airport near Novorossiysk, Russia. Such attacks on OT systems can have severe physical consequences.

Modern critical sectors increasingly rely on cyber-physical systems (CPS) that integrate cyber and physical functionalities to enhance efficiency, but also expose vulnerabilities. Attacks on CPS-reliant sectors, such as transportation, energy and health, pose significant risks to public safety, economic stability and national security.