VDR is a code for voyage data recorder and is a black box for maritime use. The system typically consists of a base unit that gathers data from bridge equipment and sensors, and stores the information on internal hard drives. This unit is connected the capsule that protects it, which can be either fixed or float-free and designed to withstand fire, high sea pressure as well as penetration and shock. The device is usually fitted to a vessel, and the capsule is put in a convenient location for quick retrieval in case of a marine accident.
Current security standards for vdr systems contain requirements that make sure that the device can be accessed and here are the findings returned to investigators following a maritime collision. These standards could create security holes that allow an attacker to modify the device or alter or destroy evidence. This article demonstrates how the risks can be reduced without compromising the performance of the device, or limiting access to the crucial accident report data that it holds.
One issue that was highlighted by the attacks detailed in this article is that a lot of VDRs rely on standard interfaces such as USBs for software updates and data downloads. These interfaces expose devices to a variety of threats that can be exploited using widely-available tools. If you use exclusive, dedicated interfaces, you can limit the chance of attacks. In addition, requiring the use of a password or other secure measure to access these ports can help restrict their access and add additional levels of security.