Maritime Cybersecurity: A Comprehensive Review

• URL: http://arxiv.org/abs/2409.11417v3
• Date: Wed, 6 Nov 2024 09:53:09 GMT
• Title: Maritime Cybersecurity: A Comprehensive Review
• Abstract summary: Maritime cybersecurity refers to the protection of computer systems and digital assests within the maritime industry. In this survey, we aim to identify the significant domains of maritime cybersecurity and measure their effectiveness. A multi-dimensional taxonomy of maritime cyber attacks is presented, offering insights into threat actors, motivations, and impacts. We have evaluated various security solutions, from integrated solutions to component specific solutions.
• Score: 8.406766604243163
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The maritime industry stands at a critical juncture, where the imperative for technological advancement intersects with the pressing need for robust cybersecurity measures. Maritime cybersecurity refers to the protection of computer systems and digital assests within the maritime industry, as well as the broader network of interconnected components that make up the maritime ecosystem. In this survey, we aim to identify the significant domains of maritime cybersecurity and measure their effectiveness. We have provided an in-depth analysis of threats in key maritime systems, including AIS, GNSS, ECDIS, VDR, RADAR, VSAT, and GMDSS, while exploring real-world cyber incidents that have impacted the sector. A multi-dimensional taxonomy of maritime cyber attacks is presented, offering insights into threat actors, motivations, and impacts. We have also evaluated various security solutions, from integrated solutions to component specific solutions. Finally, we have shared open challenges and future solutions. In the supplementary section, we have presented definitions and vulnerabilities of vessel components that have discussed in this survey. By addressing all these critical issues with key interconnected aspects, this review aims to foster a more resilient maritime ecosystem.

Related papers

• Batten the Hatches: Cybersecurity with Military Mariners [9.444923237860186]
  We take an early step at understanding military cybersecurity by investigating how service members understand, recognize, and respond to cyber risk.<n>We find that cybersecurity is organizationally abstract on ships, so mariners build cyber risk models from informal experience rather than formal instruction.<n>These findings inform actionable recommendations to help military operators frame cyber threats, merge longstanding nautical doctrine with modern systems, and apply military insights to the civilian sector.
  arXiv  Detail & Related papers  (2026-09-11T13:04:56Z)
• An Empirical Study on the Security Vulnerabilities of GPTs [48.12756684275687]
  GPTs are one kind of customized AI agents based on OpenAI's large language models.<n>We present an empirical study on the security vulnerabilities of GPTs.
  arXiv  Detail & Related papers  (2025-11-28T13:30:25Z)
• Salty Seagull: A VSAT Honeynet to Follow the Bread Crumb of Attacks in Ship Networks [0.0]
  We present Salty Seagull, a honeynet conceived to simulate a VSAT system for ships.<n>Based on existing vulnerabilities, we purposefully integrate them into our system to increase attacker engagement.<n>Results show that while numerous generic attacks have been attempted, only one curious attacker with knowledge of the nature of the system managed to access it.
  arXiv  Detail & Related papers  (2025-08-15T08:51:25Z)
• SoK: Securing the Final Frontier for Cybersecurity in Space-Based Infrastructure [0.0]
  This study analyzes the range of possible space cyber-attack vectors, which include ground, space, satellite, and satellite constellations.<n>It also assesses the efficacy of mitigation measures that are linked with space infrastructures.<n>Based on the analysis, this paper identifies potential research challenges for developing and testing cutting-edge technology solutions.
  arXiv  Detail & Related papers  (2025-07-22T22:51:31Z)
• Enabling Security on the Edge: A CHERI Compartmentalized Network Stack [42.78181795494584]
  CHERI provides strong security from the hardware level by enabling fine-grained compartmentalization and memory protection.<n>Our case study examines the trade-offs of isolating applications, TCP/IP libraries, and network drivers on a CheriBSD system deployed on the Arm Morello platform.
  arXiv  Detail & Related papers  (2025-07-07T09:37:59Z)
• A Sea of Cyber Threats: Maritime Cybersecurity from the Perspective of Mariners [11.0069835329933]
  Maritime systems, including ships and ports, are critical components of global infrastructure.<n>Recent attacks disrupting Maersk, one of the world's largest shipping companies, caused widespread impacts on international trade.<n>Despite the sector's importance, maritime cybersecurity remains underexplored, leaving significant gaps in understanding its challenges and risks.
  arXiv  Detail & Related papers  (2025-06-18T19:45:35Z)
• CyFence: Securing Cyber-Physical Controllers via Trusted Execution Environment [45.86654759872101]
  Cyber-physical systems (CPSs) have experienced a significant technological evolution and increased connectivity, at the cost of greater exposure to cyber-attacks.<n>We propose CyFence, a novel architecture that improves the resilience of closed-loop control systems against cyber-attacks by adding a semantic check.<n>We evaluate CyFence considering a real-world application, consisting of an active braking digital controller, demonstrating that it can mitigate different types of attacks with a negligible overhead.
  arXiv  Detail & Related papers  (2025-06-12T12:22:45Z)
• Secure Physical Layer Communications for Low-Altitude Economy Networking: A Survey [76.36166980302478]
  The Low-Altitude Economy Networking (LAENet) is emerging as a transformative paradigm. Physical layer communications in the LAENet face growing security threats due to inherent characteristics of aerial communication environments. This survey comprehensively reviews existing secure countermeasures for physical layer communication in the LAENet.
  arXiv  Detail & Related papers  (2025-04-12T09:36:53Z)
• Frontier AI's Impact on the Cybersecurity Landscape [42.771086928042315]
  This paper presents an in-depth analysis of frontier AI's impact on cybersecurity.<n>We first define and categorize the marginal risks of frontier AI in cybersecurity.<n>We then systemically analyze the current and future impacts of frontier AI in cybersecurity.
  arXiv  Detail & Related papers  (2025-04-07T18:25:18Z)
• Safety and Security Risk Mitigation in Satellite Missions via Attack-Fault-Defense Trees [2.252059459291148]
  This work presents a case study from Ascentio Technologies, a mission-critical system company in Argentina specializing in aerospace. The main focus will be on the Ground Segment for the satellite project currently developed by the company. This paper showcases the application of the Attack-Fault-Defense Tree framework, which integrates attack trees, fault trees, and defense mechanisms into a unified model.
  arXiv  Detail & Related papers  (2025-04-01T17:24:43Z)
• Literature Review: Cyber Security Monitoring in Maritime [0.7421845364041001]
  In recent years, many cyber incidents have occurred in the maritime sector, targeting the information technology (IT) and operational technology (OT) infrastructure. None of the previous studies has focused on cyber security monitoring, which aims at timely detection of cyber attacks with automated methods. This article addresses this research gap and surveys the methods, algorithms, tools and architectures used for cyber security monitoring in the maritime sector.
  arXiv  Detail & Related papers  (2025-03-23T19:06:25Z)
• Security by Design Issues in Autonomous Vehicles [0.7999703756441756]
  This research outlines the diverse security layers, spanning physical, cyber, coding, and communication aspects, in the context of AVs. We provide insights into potential solutions for each potential attack vector, ensuring that autonomous vehicles remain secure and resilient in an evolving threat landscape.
  arXiv  Detail & Related papers  (2025-01-07T19:24:11Z)
• Securing Legacy Communication Networks via Authenticated Cyclic Redundancy Integrity Check [98.34702864029796]
  We propose Authenticated Cyclic Redundancy Integrity Check (ACRIC) ACRIC preserves backward compatibility without requiring additional hardware and is protocol agnostic. We show that ACRIC offers robust security with minimal transmission overhead ( 1 ms)
  arXiv  Detail & Related papers  (2024-11-21T18:26:05Z)
• Cyber Threat Landscape Analysis for Starlink Assessing Risks and Mitigation Strategies in the Global Satellite Internet Infrastructure [0.0]
  This study aims to provide valuable insights into the cybersecurity challenges inherent in the operation of global satellite internet infrastructure. By prioritizing risks and proposing effective mitigation strategies, this research seeks to contribute to the ongoing efforts to safeguard the integrity and accessibility of satellite-based internet connectivity.
  arXiv  Detail & Related papers  (2024-05-11T23:03:31Z)
• We need to aim at the top: Factors associated with cybersecurity awareness of cyber and information security decision-makers [0.0]
  We study cybersecurity awareness of cyber and information security decision-makers. Our findings indicate that awareness of well-known threats and solutions seems to be quite low for individuals in decision-making roles.
  arXiv  Detail & Related papers  (2024-04-06T20:32:19Z)
• The Security and Privacy of Mobile Edge Computing: An Artificial Intelligence Perspective [64.36680481458868]
  Mobile Edge Computing (MEC) is a new computing paradigm that enables cloud computing and information technology (IT) services to be delivered at the network's edge. This paper provides a survey of security and privacy in MEC from the perspective of Artificial Intelligence (AI) We focus on new security and privacy issues, as well as potential solutions from the viewpoints of AI.
  arXiv  Detail & Related papers  (2024-01-03T07:47:22Z)
• Leveraging Traceability to Integrate Safety Analysis Artifacts into the Software Development Process [51.42800587382228]
  Safety assurance cases (SACs) can be challenging to maintain during system evolution. We propose a solution that leverages software traceability to connect relevant system artifacts to safety analysis models. We elicit design rationales for system changes to help safety stakeholders analyze the impact of system changes on safety.
  arXiv  Detail & Related papers  (2023-07-14T16:03:27Z)
• A Systematization of Cybersecurity Regulations, Standards and Guidelines for the Healthcare Sector [5.121113572240309]
  This paper contributes a systematization of the significant cybersecurity documents relevant to the healthcare sector. We collected the 49 most significant documents and used the NIST cybersecurity framework to categorize key information.
  arXiv  Detail & Related papers  (2023-04-28T16:19:21Z)
• Graph Mining for Cybersecurity: A Survey [61.505995908021525]
  The explosive growth of cyber attacks nowadays, such as malware, spam, and intrusions, caused severe consequences on society. Traditional Machine Learning (ML) based methods are extensively used in detecting cyber threats, but they hardly model the correlations between real-world cyber entities. With the proliferation of graph mining techniques, many researchers investigated these techniques for capturing correlations between cyber entities and achieving high performance.
  arXiv  Detail & Related papers  (2023-04-02T08:43:03Z)
• A Comprehensive Survey on the Cyber-Security of Smart Grids: Cyber-Attacks, Detection, Countermeasure Techniques, and Future Directions [0.5735035463793008]
  We provide a classification of attacks based on the Open System Interconnection (OSI) model. We discuss in more detail the cyber-attacks that can target the different layers of smart grid networks communication.
  arXiv  Detail & Related papers  (2022-06-22T14:55:06Z)
• Edge Security: Challenges and Issues [7.315147165274525]
  Edge computing shifts data processing services to the network edge, where data are generated. This paper discusses the security threats and vulnerabilities emerging from the edge network architecture spanning from the hardware layer to the system layer.
  arXiv  Detail & Related papers  (2022-06-14T20:49:48Z)
• A System for Automated Open-Source Threat Intelligence Gathering and Management [53.65687495231605]
  SecurityKG is a system for automated OSCTI gathering and management. It uses a combination of AI and NLP techniques to extract high-fidelity knowledge about threat behaviors.
  arXiv  Detail & Related papers  (2021-01-19T18:31:35Z)
• Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain [58.30296637276011]
  This paper summarizes the latest research on adversarial attacks against security solutions based on machine learning techniques. It is the first to discuss the unique challenges of implementing end-to-end adversarial attacks in the cyber security domain.
  arXiv  Detail & Related papers  (2020-07-05T18:22:40Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.