{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,28]],"date-time":"2026-08-28T10:17:52Z","timestamp":1787912272493,"version":"build-2784847793"},"publisher-location":"Cham","reference-count":60,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031171420","type":"print"},{"value":"9783031171437","type":"electronic"}],"license":[{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,1,1]],"date-time":"2022-01-01T00:00:00Z","timestamp":1640995200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022]]},"DOI":"10.1007\/978-3-031-17143-7_26","type":"book-chapter","created":{"date-parts":[[2022,9,23]],"date-time":"2022-09-23T00:04:22Z","timestamp":1663891462000},"page":"535-553","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":22,"title":["From Click to\u00a0Sink: Utilizing AIS for\u00a0Command and\u00a0Control in\u00a0Maritime Cyber Attacks"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3390-0772","authenticated-orcid":false,"given":"Ahmed","family":"Amro","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vasileios","family":"Gkioulos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,9,24]]},"reference":[{"key":"26_CR1","unstructured":"European defence agency, maritime domain (2017). https:\/\/eda.europa.eu\/docs\/default-source\/eda-factsheets\/2017-09-27-factsheet-maritime"},{"key":"26_CR2","unstructured":"How mitre att &ck alignment supercharges your siem (2019). www.securonix.com\/how-mitre-attack-alignment-supercharges-your-siem\/"},{"key":"26_CR3","unstructured":"Ocean shipping and shipbuilding (2019). www.oecd.org\/ocean\/topics\/ocean-shipping\/"},{"key":"26_CR4","unstructured":"Transport modes (2019). https:\/\/ec.europa.eu\/transport\/modes_en"},{"key":"26_CR5","unstructured":"Alternate network mediums (2021). https:\/\/attack.mitre.org\/techniques\/T1438\/. Accessed 30 Jan 2022"},{"key":"26_CR6","unstructured":"Backdoor built in to widely used tax app seeded last week\u2019s notpetya outbreak (2021). https:\/\/arstechnica.com\/information-technology\/2017\/07\/heavily-armed-police-raid-company-that-seeded-last-weeks-notpetya-outbreak\/. Accessed 20 Dec 2021"},{"key":"26_CR7","unstructured":"Data encoding (2021). https:\/\/attack.mitre.org\/techniques\/T1132\/. Accessed 30 Jan 2022"},{"key":"26_CR8","unstructured":"Data obfuscation (2021). https:\/\/attack.mitre.org\/techniques\/T1001\/. Accessed 30 Jan 2022"},{"key":"26_CR9","unstructured":"Encrypted channel (2021). https:\/\/attack.mitre.org\/techniques\/T1573\/. Accessed 30 Jan 2022"},{"key":"26_CR10","unstructured":"Enhancing with mitre (2021). https:\/\/documentation.wazuh.com\/current\/user-manual\/ruleset\/mitre.html"},{"key":"26_CR11","unstructured":"Enisa threat landscape 2021 (2021). https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2021"},{"key":"26_CR12","unstructured":"Hardware additions (2021). https:\/\/attack.mitre.org\/techniques\/T1200\/"},{"key":"26_CR13","unstructured":"Hijack execution flow: Dll search order hijacking (2021). https:\/\/attack.mitre.org\/techniques\/T1574\/001\/. Accessed 14 Mar 2022"},{"key":"26_CR14","unstructured":"How large is a piece of malware? (2021). https:\/\/nakedsecurity.sophos.com\/2010\/07\/27\/large-piece-malware\/. Accessed 20 Dec 2021"},{"key":"26_CR15","unstructured":"Mitre att &ck (2021). https:\/\/attack.mitre.org\/. Accessed 14 Dec 2021"},{"key":"26_CR16","unstructured":"Project file infection (2021). https:\/\/collaborate.mitre.org\/attackics\/index.php\/Technique\/T0873"},{"key":"26_CR17","unstructured":"Protocol tunneling (2021). https:\/\/attack.mitre.org\/techniques\/T1572\/. Accessed 30 Jan 2022"},{"key":"26_CR18","unstructured":"Transient cyber asset (2021). https:\/\/collaborate.mitre.org\/attackics\/index.php\/Technique\/T0864"},{"key":"26_CR19","unstructured":"Two-way radio range, the facts about distance (2021). https:\/\/quality2wayradios.com\/store\/radio-range-distance. Accessed 14 Dec 2021"},{"key":"26_CR20","unstructured":"Amro, A.: Cyber-physical tracking of IoT devices: a maritime use case. In: Norsk IKT-konferanse for forskning og utdanning. No. 3 (2021)"},{"key":"26_CR21","doi-asserted-by":"publisher","unstructured":"Amro, A., Gkioulos, V.: Communication and cybersecurity testbed for autonomous passenger ship. In: European Symposium on Research in Computer Security, pp. 5\u201322. Springer, Heidelberg (2021). https:\/\/doi.org\/10.1007\/978-3-030-95484-0_1","DOI":"10.1007\/978-3-030-95484-0_1"},{"key":"26_CR22","doi-asserted-by":"crossref","unstructured":"Amro, A., Gkioulos, V., Katsikas, S.: Communication architecture for autonomous passenger ship. Proc. Inst. Mech. Eng. Part O: J. Risk Reliabil., 1748006X211002546 (2021)","DOI":"10.1177\/1748006X211002546"},{"key":"26_CR23","doi-asserted-by":"publisher","unstructured":"Amro, A., Oruc, A., Gkioulos, V., Katsikas, S.: Navigation data anomaly analysis and detection. Information 13(3) (2022). www.mdpi.com\/2078-2489\/13\/3\/104. https:\/\/doi.org\/10.3390\/info13030104","DOI":"10.3390\/info13030104"},{"key":"26_CR24","doi-asserted-by":"crossref","unstructured":"Aziz, A., Tedeschi, P., Sciancalepore, S., Di Pietro, R.: Secureais-securing pairwise vessels communications. In: 2020 IEEE Conference on Communications and Network Security (CNS), pp. 1\u20139. IEEE (2020)","DOI":"10.1109\/CNS48642.2020.9162320"},{"key":"26_CR25","doi-asserted-by":"crossref","unstructured":"Balduzzi, M., Pasta, A., Wilhoit, K.: A security evaluation of AIS automated identification system. In: Proceedings of the 30th Annual Computer Security Applications Conference, pp. 436\u2013445 (2014)","DOI":"10.1145\/2664243.2664257"},{"key":"26_CR26","unstructured":"BIMCO: the guidelines on cyber security onboard ships. BIMCO (2016)"},{"key":"26_CR27","unstructured":"Blauwkamp, D., Nguyen, T.D., Xie, G.G.: Toward a deep learning approach to behavior-based AIS traffic anomaly detection. In: Dynamic and Novel Advances in Machine Learning and Intelligent Cyber Security (DYNAMICS) Workshop, San Juan, PR (2018). https:\/\/faculty.nps.edu\/Xie\/papers\/ais_analysis_18.pdf"},{"key":"26_CR28","unstructured":"Circular, I.D.S.: Guidance on the use of AIS application-specific messages\u2014IMO NAV55\/21\/Add 1"},{"key":"26_CR29","unstructured":"Commission, I.I.E., et al.: Iec 61162\u20131 (2010)"},{"key":"26_CR30","unstructured":"Commission, I.I.E., et al.: Iec 61162\u2013450 (2016)"},{"key":"26_CR31","unstructured":"Committee, T.M.S.: Interim guidelines on maritime cyber risk management (msc-fal.1\/circ.3\/rev.1). https:\/\/cutt.ly\/6R8wqjN"},{"key":"26_CR32","unstructured":"Committee, T.M.S.: International maritime organization (imo) guidelines on maritime cyber risk management (2017). www.imo.org\/en\/OurWork\/Security\/Pages\/Cyber-security.aspx"},{"key":"26_CR33","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.107934","volume":"189","author":"SY Enoch","year":"2021","unstructured":"Enoch, S.Y., Lee, J.S., Kim, D.S.: Novel security models, metrics and security assessment for maritime vessel networks. Comput. Netw. 189, 107934 (2021)","journal-title":"Comput. Netw."},{"key":"26_CR34","doi-asserted-by":"crossref","unstructured":"Glomsrud, J., Xie, J.: A structured stpa safety and security co-analysis framework for autonomous ships. In: European Safety and Reliability conference, Germany, Hannover (2019)","DOI":"10.3850\/978-981-11-2724-3_0105-cd"},{"key":"26_CR35","doi-asserted-by":"crossref","unstructured":"Goudosis, A., Katsikas, S.: Secure AIS with identity-based authentication and encryption. TransNav: Int. J. Marine Navig. Saf. Sea Transp. 14(2) (2020)","DOI":"10.12716\/1001.14.02.03"},{"key":"26_CR36","unstructured":"Greenberg, A.: The untold story of notpetya, the most devastating cyberattack in history. https:\/\/bit.ly\/MaerskAttack"},{"issue":"5","key":"26_CR37","doi-asserted-by":"publisher","first-page":"1025","DOI":"10.1017\/S0373463318000164","volume":"71","author":"OS Hareide","year":"2018","unstructured":"Hareide, O.S., J\u00f8sok, \u00d8., Lund, M.S., Ostnes, R., Helkala, K.: Enhancing navigator competence by demonstrating maritime cyber security. J. Navig. 71(5), 1025\u20131039 (2018)","journal-title":"J. Navig."},{"key":"26_CR38","unstructured":"Havdal, G., Heggelund, C.T., Larssen, C.H.: Design of a Small Autonomous Passenger Ferry. Master\u2019s thesis, NTNU (2017)"},{"key":"26_CR39","doi-asserted-by":"crossref","unstructured":"Hemminghaus, C., Bauer, J., Padilla, E.: Brat: a bridge attack tool for cyber security assessments of maritime systems (2021)","DOI":"10.12716\/1001.15.01.02"},{"key":"26_CR40","unstructured":"Hooper, J.L.: Considerations for operationalizing capabilities for embedded communications signals in maritime radar. Technical report, NAVAL POSTGRADUATE SCHOOL MONTEREY CA (2018)"},{"key":"26_CR41","unstructured":"IMO: Resolution a.1106(29) revised guidelines for the onboard operational use of shipborne automatic identification systems (AIS) (2015)"},{"key":"26_CR42","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.113219","volume":"147","author":"C Iphar","year":"2020","unstructured":"Iphar, C., Ray, C., Napoli, A.: Data integrity assessment for maritime anomaly detection. Expert Syst. Appl. 147, 113219 (2020)","journal-title":"Expert Syst. Appl."},{"issue":"5","key":"26_CR43","doi-asserted-by":"publisher","first-page":"1860","DOI":"10.3390\/s22051860","volume":"22","author":"Y Jo","year":"2022","unstructured":"Jo, Y., Choi, O., You, J., Cha, Y., Lee, D.H.: Cyberattack models for ship equipment based on the mitre att &ck framework. Sensors 22(5), 1860 (2022)","journal-title":"Sensors"},{"key":"26_CR44","doi-asserted-by":"crossref","unstructured":"Kessler, G.: Protected ais: a demonstration of capability scheme to provide authentication and message integrity. TransNav: Int. J. Marine Navig. Saf. Sea Transp. 14(2) (2020)","DOI":"10.12716\/1001.14.02.02"},{"key":"26_CR45","unstructured":"Kovanen, T., P\u00f6yh\u00f6nen, J., Lehto, M.: epilotage system of systems\u2019 cyber threat impact evaluation. In: ICCWS 2021 16th International Conference on Cyber Warfare and Security. p. 144. Academic Conferences Limited (2021)"},{"key":"26_CR46","doi-asserted-by":"crossref","unstructured":"Leite Junior, W.C., de Moraes, C.C., de Albuquerque, C.E., Machado, R.C.S., de S\u00e1, A.O.: A triggering mechanism for cyber-attacks in naval sensors and systems. Sensors 21(9), 3195 (2021)","DOI":"10.3390\/s21093195"},{"key":"26_CR47","doi-asserted-by":"crossref","unstructured":"Lund, M.S., Hareide, O.S., J\u00f8sok, \u00d8.: An attack on an integrated navigation system (2018)","DOI":"10.1109\/CNS.2018.8433151"},{"key":"26_CR48","unstructured":"Maritime, N.R.F.N.: 46 ais safety-related messaging. https:\/\/puc.overheid.nl\/nsi\/doc\/PUC_2045_14\/1\/"},{"key":"26_CR49","unstructured":"NMEA: National marine electronics association - nmea0183 standard (2002)"},{"key":"26_CR50","unstructured":"NTNU Autoferry: Autoferry - Autonomous all-electric passenger ferries for urban water transport (2018). www.ntnu.edu\/autoferry"},{"key":"26_CR51","series-title":"Learning and Analytics in Intelligent Systems","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1007\/978-3-030-41196-1_7","volume-title":"Advances in Core Computer Science-Based Technologies","author":"S Papastergiou","year":"2021","unstructured":"Papastergiou, S., Kalogeraki, E.-M., Polemi, N., Douligeris, C.: Challenges and issues in risk assessment in modern maritime systems. In: Tsihrintzis, G.A., Virvou, M. (eds.) Advances in Core Computer Science-Based Technologies. LAIS, vol. 14, pp. 129\u2013156. Springer, Cham (2021). https:\/\/doi.org\/10.1007\/978-3-030-41196-1_7"},{"key":"26_CR52","doi-asserted-by":"crossref","unstructured":"Pavur, J., Moser, D., Strohmeier, M., Lenders, V., Martinovic, I.: A tale of sea and sky on the security of maritime vsat communications. In: 2020 IEEE Symposium on Security and Privacy (SP), pp. 1384\u20131400. IEEE (2020)","DOI":"10.1109\/SP40000.2020.00056"},{"key":"26_CR53","unstructured":"Raymond, E.S.: Aivdm\/aivdo protocol decoding. https:\/\/gpsd.gitlab.io\/gpsd\/AIVDM.html"},{"issue":"3","key":"26_CR54","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1145\/2505990.2506002","volume":"4","author":"S Standard","year":"2013","unstructured":"Standard, S., Greenlaw, R., Phillips, A., Stahl, D., Schultz, J.: Network reconnaissance, attack, and defense laboratories for an introductory cyber-security course. ACM Inroads 4(3), 52\u201364 (2013)","journal-title":"ACM Inroads"},{"key":"26_CR55","unstructured":"Std, I.: 61162\u20132. Maritime Navigation and radiocommunication equipment and systems-Digital interfaces-Part2: single talker and multiple listeners, high-speed transmission (1998)"},{"key":"26_CR56","unstructured":"Std, I.: 61162-3. Maritime Navigation and radiocommunication equipment and systems-Digital interfaces-Part3: serial data instrument network (2008)"},{"key":"26_CR57","unstructured":"Strom, B.E., Applebaum, A., Miller, D.P., Nickels, K.C., Pennington, A.G., Thomas, C.B.: Mitre att &ck: design and philosophy. Technical report (2018)"},{"issue":"1","key":"26_CR58","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1007\/s13437-019-00162-2","volume":"18","author":"K Tam","year":"2019","unstructured":"Tam, K., Jones, K.: Macra: a model-based framework for maritime cyber-risk assessment. WMU J. Maritime Aff. 18(1), 129\u2013163 (2019)","journal-title":"WMU J. Maritime Aff."},{"key":"26_CR59","doi-asserted-by":"crossref","unstructured":"Thieme, C.A., Guo, C., Utne, I.B., Haugen, S.: Preliminary hazard analysis of a small harbor passenger ferry-results, challenges and further work. In: Journal of Physics: Conference Series, vol. 1357, p. 012024. IOP Publishing (2019)","DOI":"10.1088\/1742-6596\/1357\/1\/012024"},{"issue":"2","key":"26_CR60","doi-asserted-by":"publisher","first-page":"239","DOI":"10.3390\/jcp1020013","volume":"1","author":"K Tran","year":"2021","unstructured":"Tran, K., Keene, S., Fretheim, E., Tsikerdekis, M.: Marine network protocols and security risks. J. Cybersecur. Priv. 1(2), 239\u2013251 (2021)","journal-title":"J. Cybersecur. Priv."}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2022"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-17143-7_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,23]],"date-time":"2022-09-23T00:09:41Z","timestamp":1663891781000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-17143-7_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022]]},"ISBN":["9783031171420","9783031171437"],"references-count":60,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-17143-7_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022]]},"assertion":[{"value":"24 September 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Copenhagen","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Denmark","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 September 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2022.compute.dtu.dk\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"562","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"104","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"6","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"19% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3.4","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}