Maritime Cybersecurity for USB Devices
Secure Maritime Operational and Information Technology Systems
USB devices carry malware into the OT and IT systems that run vessel navigation, propulsion, and safety. TYREX Decontamination Stations scan and sanitize removable media, protecting maritime operations and supporting compliance with IMO and USCG marine cybersecurity requirements.
Decontamination Stations Deployed
Customers Worldwide
Signature-Based Antivirus
Anti-Malware Solutions
Maritime Cybersecurity Attacks Are at an All-Time High
Research shows a 900% increase in cyberattacks targeting maritime infrastructure since 2020. Vessels and port infrastructure can be compromised in seconds if infected removable media or USB devices connect to critical systems.
Maritime Operations Depend on Removable Media
The maritime industry relies on USB devices for chart updates, to transfer data to air-gapped bridge systems, as diagnostic tools on engine control units and propulsion systems, and for maintenance and firmware updates. They are also an everyday convenience for passengers and crew.
A maritime cyber risk management solution that securely decontaminates removable devices is the only way to reliably defend against USB threats.
USB Devices Connect to Critical Systems
- ECDIS
- Radar / ARPA
- Voyage Data Recorders
- GMDSS
- Propulsion and Engine
- Control Systems
- Loading and Stability Computers
- Power Management Systems
How TYREX Protects Maritime Operations
TYREX Decontamination Stations integrate into maritime workflows in shipboard and shoreside locations. We provide fixed and ruggedized mobile models that can operate in networked and air-gapped environments.
Insert
Crew members and passengers insert their USB devices to start a scan. Stations support all standard removable media, including USB drives, external hard drives, SD cards, and Android smart devices.
Analyze
Multiple AI-powered antivirus and antimalware engines scan the device. Advanced analysis identifies firmware-level BadUSB attacks and zero-day exploits.
Clean
The station removes or quarantines malicious content using military-grade sanitization protocols. Legitimate files and functionality are preserved.
Certify
Decontaminated devices optionally receive a digital certificate. Customers who use our Workstation Protect Agent benefit from endpoint protection that allows only certified devices to connect.
Maritime Cybersecurity Compliance
International and US regulations now require vessels and port facilities to manage cyber risk, including controls over removable media. TYREX Decontamination Stations provide the physical enforcement layer for removable device cybersecurity in the marine transportation system.
IMO Cybersecurity Requirements
IMO Resolution MSC.428(98) requires cyber risk management under the ISM Code.
Guidelines name “inappropriate use of removable media” as a vulnerability that operators need to address.
TYREX supports IMO compliance with removable media controls
IACS Classification Society Requirements
IACS Unified Requirements UR E26 and UR E27 set cyber resilience standards for new vessels.
UR E26 specifically requires controls over removable media in OT and IT environments.
TYREX scans all media at the point of entry to ship systems
USCG Cybersecurity Final Rule
The Coast Guard’s “Cybersecurity in the Marine Transportation System” mandates maritime cybersecurity standards for US-flagged vessels, MTSA-regulated facilities, and Outer Continental Shelf facilities.
TYREX audit logs support USCG inspection and Document of Compliance requirements.
TYREX USB Decontamination Stations
A portable unit built for harsh maritime conditions with MIL-STD-810G ruggedization. TYREX MOBILE is ideal for offshore platforms, deck operations, and port inspections where portable USB security is essential.
Designed for compact ship environments, including bridge stations and engine rooms. TYREX SATELLITE’s wall-mountable design saves space while ensuring critical navigation and operational systems remain protected from USB-borne threats.
Fits on desks and control consoles where maritime professionals handle sensitive operational data, cargo manifests, and vessel communication systems. The TYREX CONSOLE is the preferred option for maritime office environments, port control centers, and ship management facilities.
A kiosk unit suitable for ship terminals, port facilities, and crew boarding areas. The large display can show maritime safety protocols while decontaminating USB devices. Customizable branding reinforces your organization’s commitment to cybersecurity across all vessel operations.
USB Security Built for Maritime Environments
Fully Operational Offline
TYREX stations can operate with local threat definitions stored on the device. They function in air-gapped environments and with intermittent connectivity, supporting maritime compliance and cybersecurity in challenging environments.
Protection Before the Endpoint
Endpoint security tools detect threats after a USB device has connected to a system. TYREX intercepts removable media before it reaches shipboard networks, eliminating threats at the physical point of entry.
Fast and Easy to Use
Integrate marine cybersecurity into existing operational workflows without disruption. Scanning completes in minutes, and the process requires no technical knowledge or IT involvement from crew members.
Trusted by 350+ organizations worldwide across energy, manufacturing, maritime, aerospace, and government.
Secure Your Most Sensitive Infrastructure Today
Schedule a consultation to assess your organization’s removable media vulnerabilities. In one conversation, you’ll see exactly how this system can fit into your operations and protect every connection that matters.
Maritime USB Security FAQ
How do we know the "cleaned" USB is actually safe?
TYREX stations scan and decontaminate USB devices, preventing dangerous viruses and malware from entering secure systems. All scans are registered in reports that you can access via the TYREX Management Server, including the time of the scan and what was found. If you require additional protection, Decontamination Stations can optionally add a digital certificate to scanned devices. The TYREX Workstation Agent, when installed on your workstations, prevents the use of any non-certified devices.
How does your USB security solution compare to blocking USB ports?
Completely blocking USB ports isn’t feasible for maritime operations, which depend on data transfer from USB devices. TYREX provides a pragmatic middle ground. USB decontamination maintains operational flexibility and regulatory compliance while protecting against cyber threats.
How does TYREX help with IMO 2021 Cyber Risk Management compliance?
IMO Resolution MSC.428(98) requires shipping companies to address maritime cyber risks in their Safety Management Systems, with “inappropriate use of removable media” identified as a significant vulnerability requiring management in IMO-endorsed guidance. TYREX stations enforce and record IMO compliance with removable media controls, providing auditable evidence for Document of Compliance (DoC) verification.
Can we still use your USB security solution if network connectivity is poor or non-existent?
TYREX stations are designed for the realities of maritime connectivity. They can operate fully air-gapped without any network connection using their existing threat definitions and advanced detection capabilities. For completely isolated environments, threat definition updates can be managed through secure physical media transfers during maintenance operations or when, for example, a harbour pilot needs to use a USB device. Many of our maritime clients use TYREX Decontamination Stations while they are at sea with intermittent network connectivity.
What is the USCG cybersecurity final rule?
The Coast Guard’s “Cybersecurity in the Marine Transportation System” rule is the first US federal mandate for maritime cybersecurity. It requires US-flagged vessels, MTSA-regulated facilities, and Outer Continental Shelf facilities to implement maritime cyber risk management plans and report cyber incidents.
TYREX Decontamination Stations provide a documented, auditable removable media control that supports these requirements, and scan logs from the TYREX Management Server can serve as evidence during USCG inspections.
How do TYREX stations support IACS UR E26 and E27 compliance?
IACS Unified Requirements UR E26 and UR E27 set cyber resilience standards for new vessels, and UR E26 specifically requires controls over removable media in OT and IT environments.
TYREX stations enforce scanning at the point of entry before any USB device connects to shipboard systems, directly addressing this requirement. The centralized audit trail also supports the documentation and verification that classification societies expect during a survey.
Schedule a Call Today to Close Your USB Security Gaps
