VDR is the abbreviation for voyage data recorder, and is a black maritime box. The system is usually comprised of a central unit that gathers data from bridge equipment and sensors and stores the information on internal hard drives. The unit is connected to an enclosure that can be fixed or floating free and is designed to withstand fire, deep sea pressure and shock. The device is usually placed on a vessel and the capsule is located in a place that is convenient to facilitate quick retrieval in the case of a maritime accident.

Current security standards for vdr system include requirements that ensure the device can easily be accessed and returned to investigators following a maritime incident. However, these standards can also create vulnerabilities that could permit an attacker to alter the device and alter or destroy evidence. This article will show how these risks can be reduced without compromising device functionality or restricting access to crucial accident report information.

The attacks detailed in this article illustrate the fact that a large number of VDRs use generic interfaces, such as USBs for downloads and updates. These interfaces expose the devices to a wide range of threats and can be exploited using a variety of tools. By implementing dedicated, proprietary interfaces would lower the risk that these types of attacks can be leveraged. In addition, requiring a key or other security measure to gain access to the ports would help limit their availability and also provide additional security.

http://www.digitaldealdataroom.info/what-is-the-purpose-of-a-data-audit