Cyberattacks on the Maritime Sector: A Literature Review

• Published in: Journal of marine science and application Vol. 23; no. 4; pp. 689 - 706
• Main Authors: Symes, Steve, Blanco-Davis, Eddie, Graham, Tony, Wang, Jin, Shaw, Edward
• Format: Journal Article
• Language: English
• Published: Berlin/Heidelberg Springer Berlin Heidelberg 01.12.2024; Springer Nature B.V; School of Maritime Engineering and Technology,Liverpool Logistics Offshore and Marine Research Institute(LOOM),Faculty of Engineering and Technology,Liverpool John Moores University,Liverpool,L3 3AF,United Kingdom
• Subjects: Cargo ships; Cybersecurity; Electrical Machines and Networks; Engineering; Geotechnical Engineering & Applied Earth Sciences; Literature reviews; Machinery and Machine Elements; Offshore Engineering; Power Electronics; Recovery; Review; Sea vessels; Security systems; Shipping; Transportation industry; Cybersecurity; Autonomous vessels; Survivability; Artificial intelligence; Hacking
• ISSN: 1671-9433; 1993-5048
• DOI: 10.1007/s11804-024-00443-0

This study is an investigation into cyberattacks on autonomous vessels, focusing on previous “real-world” cyberattacks and their consequences. The future of commercial and noncommercial shipping is moving toward autonomous vessels. Autonomous ships can provide significant financial and logistical benefits for shipping companies and their stakeholders. However, these vessels suffer from shortcomings concerning cybersecurity. Previous cyberattacks are investigated to understand how the command system of an autonomous ship is infiltrated, the consequences of an attack, and the shortfalls of the security of the vessel. This aim is achieved via a literature review concerning cyberattacks on autonomous vessels with a focus on sources indicating how the security systems of previous vessels were breached, the consequence of said cyberattacks, and their capability for recovery. Sources used include Web of Science, Scopus, Google Scholar, Mendeley, Zotero, SciFinder, broadsheet, and newspaper articles. The results of the literature review showed that autonomous vessels are significantly vulnerable to cyberattacks. Autonomous vessels were determined to have relatively easy-to-breach security systems. In most cases, the consequences of a cyberattack had a negative financial impact, a loss of cargo, and a potential breach of oceanic airspace, resulting in military action. The vessels analyzed were left “dead in the water” until they were recovered, and after a severe attack, the affected shipping company servers suffered potential weeklong incapacitation. This study also aims to fill the gaps in the transport industry and maritime market concerning the security of autonomous vessels and viable recovery procedures.