对基于S-100的海上导航软件安全漏洞的分析
Hoyeon Cho1,2, Changui Lee3, Seojeong Lee3
1Division of Maritime Information Technology, National Korea Maritime and Ocean University, Busan 49112, Republic of Korea.
Sensors (Basel, Switzerland)
|February 27, 2026
概括
自动化安全工具忽略了S-100电子图表系统中的关键漏洞. 在强制采用之前,专家审查对于识别诸如远程代码执行 (RCE) 等风险至关重要.
科学领域:
- 海事技术是海事技术.
- 软件安全 软件安全
- 电子图表显示和信息系统 (ECDIS)
背景情况:
- 对于 ECDIS 的 S-100 标准依赖 Lua 脚本进行图表染.
- 目前的S-100规范缺乏对脚本执行的定义安全措施.
- 这一缺口给海上导航系统带来了重大的网络安全风险.
研究的目的:
- 为了评估自动静态应用安全测试 (SAST) 工具与专家手动审查S-100软件安全的有效性.
- 识别和评估符合S-100的软件中的漏洞,特别是OpenS100参考实现.
- 通知国际水文组织 (IHO) 关于对S-100标准进行必要的安全增强.
主要方法:
- 在OpenS100实现中应用了四个SAST工具.
- 对同一个软件进行了专家手动安全审查.
- 开发了概念验证 (PoC) 来验证已识别的漏洞,包括远程代码执行 (RCE).
主要成果:
- 自动化的SAST工具检测到许多缺陷,但错过了83%的专家识别的漏洞.
- 通过恶意描绘目录发现了一个使RCE (CVSS 9.3) 成为可能的关键漏洞.
- SAST 工具在海事领域的具体情况和 C++-Lua 接口风险方面遇到了困难.
结论:
- 识别的漏洞与S-100标准规范缺口有关,而不仅仅是编码错误.
- 功能安全认证需要加强,以涵盖设计层面的安全风险.
- IHO必须在2029年采用截止日期之前将脚本沙箱化等安全控制整合到S-100中.
相关概念视频
01:26Errors in Global Positioning System
370
Global Positioning System (GPS) technology has revolutionized navigation and positioning, but its accuracy is often compromised by various errors. These errors, stemming from environmental, satellite, and receiver-related factors, require careful mitigation to ensure reliable performance across applications.Atmospheric ErrorsGPS signals travel through the Earth’s ionosphere and troposphere, introducing delays which affect accuracy. The ionosphere is strongly influenced by charged particles,...
370
01:18Guidelines and Strategies for Safe Computer Charting
2.9K
The guidelines and strategies provided by the American Nurses Association (ANA) and the Canadian Nurses Association (CNA) offer essential principles for ensuring safe and secure computer charting systems in healthcare settings. Let's break down each recommendation:
Maintain Confidentiality and Security:
Maintain Confidentiality and Security:
2.9K
01:30Types of Global Positioning System Surveys
393
GPS surveying methods vary in application, accuracy, and data collection techniques, catering to diverse surveying and mapping needs. Static GPS, kinematic GPS, and real-time kinematic (RTK) surveying are widely used. Each technique offers distinct advantages.Static GPS involves placing one receiver at a known reference point and another at the target point. It collects exact positional data by observing multiple satellite ranges over an extended period, achieving centimeter-level accuracy for...
393
01:21Pilot and Numeric Relaying
503
Pilot relaying is a type of differential protection used in power systems. It compares electrical quantities at the terminals of equipment via a communication channel instead of direct relay interconnection. This method is essential for transmission lines where the terminals are far apart, typically up to 80 km for lines with 69 to 115 kV ratings. Four types of communication channels are used for pilot relaying:
503
02:28Leaky Scanning
5.8K
During most eukaryotic translation processes, the small 40S ribosome subunit scans an mRNA from its 5' end until it encounters the first start AUG codon. The large 60S ribosomal subunit then joins the smaller one to initiate protein synthesis. The location of the translation initiation is largely determined by the nucleotides near the start codon as there may be multiple translation initiation sites present on the mRNA. Marilyn Kozak discovered that the sequence RCCAUGG (where R...
5.8K
01:17Design Example: Analyzing Capacity Contours for Flood Risk Assessment
342
Flood risk assessment involves careful planning and analysis to ensure the safety of communities near water retention structures. Capacity contours are a vital tool in this process, as they illustrate the potential spread of water at specific levels in a given area. In the context of building a bund across a small valley, these contours play a critical role in evaluating the safety of nearby residential areas.In this example, the bund is intended to store stormwater in the valley. The engineers...
342