AIS Data Vulnerability Indicated by a Spoofing Case-Study
Source abstract
Abstract
This paper takes a close look at the landscape of the Automatic Identification System (AIS) as a major source of information for maritime situational awareness (MSA) and identifies its vulnerabilities and challenges for safe navigation and shipping. As an important subset of cyber threats affecting many maritime systems, the AIS is subject to problems of tampering and reliability; indeed, the messages received may be inadvertently false, jammed, or intentionally spoofed. A systematic literature review was conducted for this article, complemented by a case study of a specific spoofing event near Elba in December 2019, which confirmed that the typical maritime AIS could be easily spoofed and generate erroneous position information. This intentional spoofing has affected navigation in international waters and passage through territorial waters. The maritime industry is neither immune to cyberattacks nor fully prepared for the risks associated with the use of modern digital systems. Maintaining seaworthiness in the face of the impact of digital technologies requires a robust cybersecurity framework.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Maritime Navigation and Safety · Maritime Security and History · International Maritime Law Issues
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Maritime Studies and Transport, University of Ljubljana, 6320 Portorož, Slovenia
Faculty of Maritime Studies, University of Split, 21000 Split, Croatia
Croatian Defence Academy, University of Split, 21000 Split, Croatia
Funding
Slovenian National Research Agency
References (55)
Show source-provided references
1. (2021, February 12). IALA Guideline-An Overview of AIS, Edition 2.0, Available online: https://www.navcen.uscg.gov/pdf/IALA_Guideline_1082_An_Overview_of_AIS.pdf.
2. Weintrit, A. (2009). The Electronic Chart Display and Information System (ECDIS): An Operational Handbook, CRC Press.10.1201/9781439847640 ↗
3. Bole, A., Dineley, B., and Wall, A. (2005). Radar and ARPA Manual, Elsevier Butterworth–Hernemann. [2nd ed.].
4. (2003). Shipboard Automatic Identification System Displays, Meeting the Needs of Mariners, Transportation Research Board. Available online: https://www.nap.edu/read/10708/chapter/1.
5. IMO (2020). The International Convention for Safety of Life at Sea (Consolidated Edition 2020), IMO Publishing.
6. Kjerstad, N. (2016). Electronic and Acoustic Navigation Systems, Norwegian Institute of Science and Technology.
7. Satellite-based AIS and its Comparison with LRIT10.12716/1001.08.02.02 ↗
8. Metrics and provider-based results for completeness and temporal resolution of satellite-based AIS services10.1016/j.marpol.2018.03.028 ↗
9. Aziz, A., Tedeschi, P., Sciancalepore, S., and Di Pietro, R. (July, January 29). SecureAIS-Securing Pairwise Vessels Communications. Proceedings of the 2020 IEEE Conference on Communications and Network Security (CNS), Avignon, France.10.1109/CNS48642.2020.9162320 ↗
10. (2021, February 12). Satellite Based AIS. Available online: https://www.kystverket.no/en/EN_Maritime-Services/Reporting-and-Information-Services/ais/Satellite-based-AIS/.
11. Near Real-time S-AIS: Recent Developments and Implementation Possibilities for Global Maritime Stakeholders
12. AIS Data Visualization for Maritime Spatial Planning (MSP)
13. IMO (2015). Resolution A.1106(29). Revised Guidelines for the Onboard Operational Use of Shipborne Automatic Identification Systems (AIS), IMO Publishing.
14. Series, M. (2010). Technical Characteristics for An Automatic Identification System Using Time-Division Multiple Access in the VHF Maritime Mobile Band, Recommendation ITU.
15. Sciancalepore, S., Tedeschi, P., Aziz, A., and Di Pietro, R. (2021). Auth-AIS: Secure, Flexible, and Backward-Compatible Authentication of Vessels AIS Broadcasts. IEEE Trans. Dependable Secur. Comput.10.1109/TDSC.2021.3069428 ↗
16. Towards a secure automatic identification system (AIS)10.1007/s00773-018-0561-3 ↗
17. Prediction of Marine Traffic Density Using Different Time Series Model from AIS data of Port Klang and Straits of Malacca
18. Natale, F., Gibin, M., Alessandrini, A., Vespe, M., and Paulrud, A. (2015). Mapping fishing effort through AIS data. PLoS ONE, 10.10.1371/journal.pone.0130746 ↗
19. Vessel Pattern Knowledge Discovery from AIS Data: A Framework for Anomaly Detection and Route Prediction10.3390/e15062218 ↗
20. Technological Advances and Efforts to Reduce Piracy
21. Lee, E.S., Mokashi, A.J., Moon, S.J., and Kim, G.S. (2019). The Maturity of Automatic Identification Systems (AIS) and Its Implications for Innovation. J. Mar. Sci. Eng., 7.10.3390/jmse7090287 ↗
22. Past, present, and future of the satellite-based automatic identification system: Areas of applications (2004–2016)10.1007/s13437-018-0151-6 ↗
23. Towards a Methodology for Developing Evidence-Informed Management Knowledge by Means of Systematic Review* Introduction: The Need for an Evidence-Informed Approach
24. A Typology of Reviews: An Analysis of 14 Review Types and Associated Methodologies10.1111/j.1471-1842.2009.00848.x ↗
25. Systematic Reviews10.1188/15.ONF.89-93 ↗
26. (2021, February 03). Traffic Density Mapping Service—Methodology. EMS—Ref. Ares (2019)4005069—24/06/2019. Available online: http://www.emsa.europa.eu/related-projects/tdms.html.
27. Balduzzi, M., Wilhoit, K., and Pasta, A. (2018). A Security Evaluation of AIS. Trend Micro Res. Paper, 1–9.
28. Protected AIS: A Demonstration of Capability Scheme to Provide Authentication and Message Integrity10.12716/1001.14.02.02 ↗
29. Ray, C., Iphar, C., Napoli, A., Gallen, R., and Bouju, A. (2015, January 18–21). DeAIS project: Detection of AIS Spoofing and Resulting Risks. Proceedings of the MTS/IEEE OCEANS’15, Genoa, Italy.10.1109/OCEANS-Genova.2015.7271729 ↗
30. Di Ciaccio, F., Menegazzo, P., and Troisi, S. (2019). Optimization of the Maritime Signaling System in the Lagoon of Venice. Sensors, 19.10.3390/s19051216 ↗
31. (2021, March 06). IALA Guideline No. 1081-On Provision of Virtual Aids to Navigation, Edition 1.1. Available online: https://www.e-navigation.nl/sites/default/files/1081%20Virtual%20AtoN.pdf.
32. Madden, R. (2021, March 06). USCG Rolling Out AIS Aids to Navigation: Are They Safe AND Secure?. Available online: https://gcaptain.com/uscg-ais-aton-navigation/.
33. (2021, March 06). IALA–Position on the Development of AtoN Service, Issue 1. Available online: https://www.iala-aism.org/content/uploads/2018/04/Position-on-the-development-of-AtoN-services-2017-12-15.pdf.
34. Lesley Walls, T.B., and Matthew, R. (2016, January 25–29). Risk Analysis of falsified Automatic Identification System for the improvement of maritime traffic safety. Proceedings of the ESREL 2016 Conference, Glasgow, UK.
35. An expert-based method for the risk assessment of anomalous maritime transportation data10.1016/j.apor.2020.102337 ↗
36. (2021, May 14). NATO Science & Technology Organization, Centre for Maritime Research & Experimentation. Available online: https://www.cmre.nato.int/research/maritime-situational-awareness/.
37. Secure AIS with Identity-Based Authentication and Encryption10.12716/1001.14.02.03 ↗
38. (2021, February 01). Thousands of GMDSS Jamming and Spoofing Incidents Reported in 2020. Available online: https://www.linkedin.com/pulse/thousands-gnss-jamming-spoofing-incidents-reported-2020-guy-buesnel/.
39. Čaleta, D., and Powers, F.J. (2020). Cyber Threats to Maritime Critical Infrastructure. Cyber Terrorism and Extremism as Threat to Critical Infrastructure Protection, Ministry of Defense, Republic of Slovenia, Institute for Corporative Security Studies, Joint Special Operations University.10.4018/978-1-5225-7912-0.ch030 ↗
40. Androjna, A., Brcko, T., Pavic, I., and Greidanus, H. (2020). Assessing Cyber Challenges of Maritime Navigation. J. Mar. Sci. Eng., 8.10.3390/jmse8100776 ↗
41. (2019, July 20). Seized UK Tanker Likely ‘Spoofed’ by Iran. Available online: https://lloydslist.maritimeintelligence.informa.com/LL1128820/Seized-UK-tanker-likely-spoofed-by-Iran.
42. (2021, February 01). Sinister Spoofing in Shanghai. Available online: https://insidegnss.com/sinister-spoofing-in-shanghai/#:~:text=Someone%20has%20updated%2019th%20century,experts%20have%20never%20seen%20before.
43. (2021, February 02). Patterns of GPS Spoofing at Chinese Ports. Available online: https://www.maritime-executive.com/editorials/patterns-of-gps-spoofing-at-chinese-ports.
44. (2021, February 02). New GPS ‘Circle Spoofing’ Moves Ship Locations Thousands of Miles. Available online: https://www.gpsworld.com/new-gps-circle-spoofing-moves-ship-locations-thousands-of-miles/.
45. (2021, February 01). Chinese Fishing Fleet Encroaches on the Galapagos Islands: HawkEye360 Monitors the Fleet for Suspicious Behavior and Potential Illegal Fishing. Available online: https://www.he360.com/insight/potential-illegal-fishing-seen-from-space/.
46. ITU-R, M. (2014). 2287-0. Automatic Identification System VHF Data Link Loading, ITU.
47. John, P. (2021, April 17). Intelligent Maritime Navigation with the Automatic Identification System. Available online: https://ctrf.ca/wp-content/uploads/2014/07/Intelligent-Maritime-Navigation.pdf.
48. Series, M. (2021, April 17). Technical Characteristics for an Automatic Identification System Using Time Division Multiple Access in the VHF Maritime Mobile Frequency Band. Available online: http://www.itu.int/dms_pubrec/itu-r/rec/m/R-REC-M.1371-5-201402-I!!PDF-E.pdf.
49. DHS Navihation Center (2021, April 17). Automatic Identification System, Available online: https://www.navcen.uscg.gov/?pag.
50. ICAO Doc 9861 AN/448 (2004). Manual on VHF Digital Link (VDL) Mode 4, ICAO.
51. A novel anomaly detection approach to identify intentional AIS on-off switching10.1016/j.eswa.2017.02.011 ↗
52. Threats to satellite navigation systems10.1016/S1353-4858(15)30019-2 ↗
53. (2021, May 12). 7 Advantages of VDES, vs. AIS in Maritime Satellite Communications. Available online: https://info.alen.space/advantages-of-vdes-vs-ais-in-maritime-satellite-communications.
54. (2021, May 12). IALA–VHF Data Exchange System (VDES)–Overview, Edition 2.0. Available online: https://www.iala-aism.org/product/vhd-data-exchange-system-vdes-overview-1117/.
55. AS, D. (2021, March 08). Cyber Security Resilience Management for Ships and Mobile offshore Units in Operation, Available online: https://brandcentral.dnvgl.com/download/DownloadGateway.dll?h=BE1B38BB718539CC0AB58A5FF2EA7A83DE6D49BC96B8DB13C4CAAFA95E9ACCDA9F12593F5BB9D3D16F4B2EB2FF9780D9.