AIS Data Vulnerability Indicated by a Spoofing Case-Study

TLDR

AIS messages are prone to tampering, false, jammed, or spoofed content, and the maritime industry lacks adequate cybersecurity preparedness. This paper examines AIS as a key source of maritime situational awareness and identifies its vulnerabilities and challenges for safe navigation. The authors performed a systematic literature review and a case study of a December 2019 spoofing incident near Elba to assess AIS security. The study shows that AIS can be easily spoofed, producing erroneous position data that disrupts navigation in both international and territorial waters.

Abstract

This paper takes a close look at the landscape of the Automatic Identification System (AIS) as a major source of information for maritime situational awareness (MSA) and identifies its vulnerabilities and challenges for safe navigation and shipping. As an important subset of cyber threats affecting many maritime systems, the AIS is subject to problems of tampering and reliability; indeed, the messages received may be inadvertently false, jammed, or intentionally spoofed. A systematic literature review was conducted for this article, complemented by a case study of a specific spoofing event near Elba in December 2019, which confirmed that the typical maritime AIS could be easily spoofed and generate erroneous position information. This intentional spoofing has affected navigation in international waters and passage through territorial waters. The maritime industry is neither immune to cyberattacks nor fully prepared for the risks associated with the use of modern digital systems. Maintaining seaworthiness in the face of the impact of digital technologies requires a robust cybersecurity framework.