Analysis of cybersecurity threats to ships in maritime transportation and optimal system design on ships

The technological devices and navigation equipment used on ships can be exposed to cyber-attacks. These attacks pose significant risks to life and property safety and can cause substantial economic damage to maritime enterprises. The aim of this study is, in light of academic research and past cyber incidents, to reveal potential cyber threats to ships and to suggest safer navigation support systems in terms of cybersecurity. The Bayesian Networks method was employed in the cybersecurity assessment of the systems. In the Bayesian network, nodes contributing to cybersecurity risks and the relationships between these nodes have been identified. Based on the possible scenarios constructed through conditional probability tables, this study aims to provide an answer to the question of how an optimal cybersecurity system should be designed for ships. In this context, alongside the theoretically ideal system design, a proposal for a practically applicable optimal design has also been developed. The theoretical optimal system design is structured under ideal conditions, incorporating maximum security measures in every component (e.g. no internet connection, use of devices from different brands, robust network infrastructure, etc.), whereas the practical system is designed with consideration of the current technological infrastructure and applicability on ships. The study has shown a significant difference between the theoretically most cyber-secure and the most cyber-insecure scenarios. This highlights significant potential improvements for corrective and preventive actions. The findings also show that satellite or radio-based navigation systems such as Positioning System and AIS pose significant cyber risks. However, it has been revealed that the real risk lies in computer technologies and computer-based systems. The study provides useful outputs for industry stakeholders and other relevant parties involved in efforts to create cyber-secure ship systems.