CRIMINOLOGICAL ANALYSIS OF CYBER THREATS AND THEIR IMPACT ON COMMERCIAL SHIPPING

The article is devoted to a criminological study of cyber threats and their impact on cy­bersecurity in the field of commercial shipping, which is an important and relevant issue for the development of a system of measures for their prevention and mitigation. A cyber threat is a set of negative factors, elements, or phenomena aimed at damaging information, telecom­munications, and other systems that ensure the proper functioning of enterprises, institutions, organizations, or the state, as well as the protection of information within such systems. Cyber threats target cybersecurity, which encompasses the state of complete protection of the vital interests of individuals, society, and the state in cyberspace. The authors identifies the components of cyber threats in the field of commercial ship­ping, which include technical aspects of the operation of automated ship and port infrastructure systems, software vulnerabilities, the human factor, and social engineering related to errors made by users with limited knowledge of information technology. The international legal regu­lation of cyber threats is analyzed, covering the International Ship and Port Facility Security Code (ISPS Code), the Guidelines on Maritime Cyber Risk Management (adopted by the Mari­time Safety Committee of the International Maritime Organization, IMO), the Guidelines on Cybersecurity Onboard Ships, and others. At present, cyber threats are widespread in the field of commercial shipping because, firstly, this sector is highly profitable in terms of economic potential, and secondly, it is closely intertwined with digital technologies. Modern ships are essentially floating computer systems where automated processes control movement, navigation, power supply, and more, while also ensuring data storage and protection. The authors examines the determinants and motivations of cybercriminals in this field (fi­nancial gain, elimination of competitors, motives of revenge, ideological motives) and formu­lates key measures for the prevention and mitigation of cyber threats in commercial shipping, which include: - raising awareness and cybersecurity culture among personnel of maritime companies, port services, and other industry participants; - developing and implementing modern technical protection tools (intrusion detection systems, password encryption, firewalls) in ship systems, port infrastructure, and logistics net­works; - developing and adhering to international standards and regulatory acts of the IMO in the field of cybersecurity, as well as fostering international cooperation and information exchange; - establishing a system for rapid response to cyber threats and cyber incidents (identifi­cation and analysis of threats; isolation of affected systems to prevent the spread of attacks; blocking malicious software and restoring system functionality; collecting evidence of cyberat­tacks for submission to law enforcement agencies; updating software and changing password systems). In the authors opinion, the effective application of preventive and mitigation measures can minimize the impact of cyber threats on commercial shipping, ensure the stability of maritime transportation, protect critical infrastructure, and maintain trust in the industry as a key element of the global economy.