
Hello! I’m currently writing from my newly designated workstation aboard the R/V Sikuliaq, docked at the University of Hawaiʻi Marine Center in Honolulu, Hawaiʻi. We are scheduled to get underway later this evening. The Sikuliaq, operated by the University of Alaska Fairbanks, is a 261-foot ice-capable research vessel, and our current expedition—SEACURE-IT—is focused on advancing cybersecurity practices in maritime environments.
Our mission centers on understanding and strengthening shipboard cybersecurity infrastructure. Today’s focus was building a simulated research vessel network using Fortinet hardware, including a FortiGate next-generation firewall and a FortiSwitch managed switch. Each virtual vessel was named after a Star Trek captain, and I’m pleased to report that the R/V Christopher Pike is now fully operational.
To bring the system online, we began by installing the firewall and switch hardware, gaining access through the serial console port. From there, we configured a VLAN (Virtual Local Area Network) and assigned appropriate switch ports. After establishing basic connectivity, we implemented firewall rules to enable WAN access for the VLAN while maintaining strict segmentation between networks.
One of the critical lessons in maritime cybersecurity is the need to separate Information Technology (IT) systems from Operational Technology (OT). Onboard vessels, OT systems (such as industrial controllers managing propulsion, navigation, and critical mechanical systems) are sometimes based on legacy architectures and lack modern security hardening. Allowing these to share a network with IT systems—or worse, exposing them to the internet—creates serious vulnerabilities. Our firewall policy design reflects this reality, ensuring the IT and OT VLANs remain isolated. It is also best practice to separate these networks so that everyday users do not accidentally interfere with critical operations.
After confirming secure internet access on the IT VLAN, we deployed a lightweight Ubuntu virtual machine using the Proxmox hypervisor. While running on limited hardware, the system performs well thanks to the efficiency of Ubuntu, enabling us to simulate key cybersecurity operations within our constrained environment.
To put our network control to the test, I implemented a multi-layered blocking policy targeting a known security concern: TikTok. Using FortiGate’s Application Control, DNS Filtering, and Web Filtering capabilities, I successfully restricted access to TikTok domains and traffic patterns. As a result, no devices on our network can currently access the platform—a practical example of layered defense and policy enforcement in a live environment.
This experience has already been invaluable. I’m gaining exposure not only to enterprise-grade network security tools, but also to the nuances of securing mission-critical systems aboard research vessels.




Driving under the Newport bridge
CAD assembly of PAR mount. A cool technique that I learned during this internship was to combine hardware and 3D printed parts. Printing threads is tricky so instead one can incorporate nuts into the design to provide the means of threading in a bolt. In this design, the nuts were press-fit into the print and aligned with the bolts. Now, what would be the weakest point of the design, printed threads, is no longer an issue.
Mounted PAR sensor
CTD monitor
CTD ready to be picked up and boomed out
Water bag in yellow
A-Frame testing with full water bags
CTD cable splice. The cable was first electrically connected to a pigtail that would be plugged into the CTD and then mechanically connected.
ADCP dunk test. During the cruise over to Seattle, two of the ADCP’s beams broke and it needed to be taken out in order to be troubleshot.
MouseTrap version 1, a 3d printed device for preventing the computer mice from flying off the desks.
Final installed version of the MouseTrap.
Biking to the Fremont Troll
Inside passage and foremast. The Met4ay is hanging off the top left of the ledge.
Wet wall. These instruments are fed by the intake pipe.
Exiting the centerboard well
Rockin, rollin, and hurlin
Desktop assembly
Installed! The sensor on the foreground is measuring the sky radiation and the other sensor is measuring the sea surface radiation.
🙂
Ethan working on installing the CTD winch boom bearing
CTD and winch boom. The CTD, structure with the gray bottles, is lowered into the ocean using the winch. The bottles (in gray withitn the cage) allows scientists to take water samples at different depths. The depth at which samples are taken is controlled in the computer lab by marine technicians.
A nice day
Before cable organization
Cables being sorted/organized before being woven into the cable trays
After cables were organized into the cable trays on the ceiling. Also, some excellent final touches with zip ties above and below the transceivers
Cables organized and Roxblox (seen in blue at the base of the cables) closed
Installing Roxblox
Ethan at the top of the mast helping the surveyers collect point data
Tx array before ice windows installed. The blue color is due to a thin layer of anti-fouling paint added to the transducer faces.
Three techs contemplating the Rx array. The white square in the hull (top left) is the Topas, a sub-bottom profiler which sends down low-frequency pulses that can penetrate into the seafloor. This allows scientist to see the different layers of sediment and rock in order to find features like ancient lakes. The trade off for sending out low-frequency pulses is that the resolution of the image you generate is lower. The round yellow ADCP in the hull (top middle) sends out higher frequency pulses which is less penetrating but the resolution is much finer. With enough resolution, scientist can detect plankton in the water column!
Raising ice windows on the Tx array. Ice windows are put into place for, as their name suggests, protecting the transducer faces from ice. The Sikuliaq often works in the Arctic and this buffer is a very important safety mechanism.
Sikuliaq riding high out of the water, being barged into place
Shipyard survivors 🙂
Transceiver room pre-transducer cables
Where the cables come out from the bottom of the ship
Tx frame on telescoping forklift
Tx frame rolling in on casters
Moving in the Rx frame
Tx frame ready to be lifted
Lookin like a million bucks 😛
Raising the transducers into the Tx frame, they are super fragile so every surface they rest on needed to have foam on it
The transducers slide between the pegs, then a plate is screwed into the pegs to lock the transducer in place
Transceiver room after pulling the transducer cables

Sunset at UAF warehouse
Pre-work fit
Working to remove the transducers
Empty frame
Small break
Pipes holding the transducer cables
Hired muscle
Pile of pulled cables