Skip to content

Hacking the Nautical Rules of the Road: Turn Left for Global Pwnage

AmpData

Explores how manipulating maritime rudder angle controllers to violate International Regulations for Preventing Collisions at Sea (COLREGs) causes severe disruption.

Summary

COLREGs and Maritime Navigation Safety

The International Regulations for Preventing Collisions at Sea (COLREGs) define universal navigation rules that mariners follow to ensure predictable vessel interactions and avoid collisions in congested waterways.

The Strategic Importance of 'Don't Turn to Port'

A fundamental guideline in maritime navigation is avoiding turns to port (left) in head-on or crossing situations. Under COLREG rules, turning to port directly violates established passing protocols and places full legal and operational liability on the vessel initiating the turn.

Cyber-Physical Manipulation of Rudder Controls

Manipulating cyber-physical systems—such as digital rudder angle controllers or NMEA-connected autopilots—can force an unexpected port turn. In maritime chokepoints and narrow channels, an induced port turn causes critical collision hazards with oncoming commercial traffic.

Legal Liability and Maritime Cyber Defense

Understanding the nautical rules of the road is crucial for maritime cybersecurity researchers and defenders to evaluate the true physical impact and legal liability resulting from compromised shipboard control systems.

Related talks

Creator Stage·20 min

  • DEF CON
  • ICS / OT
  • Date: Aug 2024
  • Location: Las Vegas

Paul Brownridge

Examines maritime vessel cybersecurity, analyzes the MV Dali incident, and reviews emerging IACS UR E26 and E27 cyber regulations.

maritimecritical-infrastructureics-ot+2