Protected AIS: a demonstration of capability scheme to provide authentication and message integrity

• Autorzy: Kessler G. C.

Identyfikatory

DOI

10.12716/1001.14.02.02

• Języki publikacji: EN

Abstrakty

EN

The Automatic Identification System (AIS) provides situational awareness for vessels at sea. AIS has a number of known security vulnerabilities that can lead to a several types of attacks on AIS, including the ability to create ghost vessels, false warning or meteorological messages, or bogus virtual aids-to-navigation (AtoN). A number of methods, with varying levels of complexity, have been proposed to better secure AIS and, indeed, emerging AIS protocols will implement some of these mechanisms. Nevertheless, little has been done to secure the current standards, which will remain in use for some time. This paper presents Protected AIS (pAIS), a demonstration of capability implementation using public-key cryptography methods to address several AIS security vulnerabilities, maintain backward compatibility, and be able to interoperate with non-pAIS devices.

Słowa kluczowe

EN

cyber security; Automatic Identification System (AIS); Protected AIS (pAIS); message integrity; authentication; virtual aids to navigation; Pretty Good Privacy (PGP); cryptography

• Wydawca: Faculty of Navigation, Gdynia Maritime University
• Czasopismo: TransNav : International Journal on Marine Navigation and Safety of Sea Transportation
• Rocznik: 2020
• Tom: Vol. 14, no. 2
• Strony: 279--286
• Opis fizyczny: Bibliogr. 20 poz., rys., tab.

Twórcy

autor

Kessler G. C.

• Embry-Riddle Aeronautical University, Daytona Beach, Florida, USA

Bibliografia

• [1] Balduzzi, M., Pasta, A., & Wilhoit, K. (2014). A security evaluation of AIS automated identification system. In Proceeding the 30th Annual Computer Security Applications Conference (ACSAC '14), pp. 436-445. New Orleans, Louisiana, December 8-12, 2014.
• [2] Balduzzi, M., Wilhoit, K., & Pasta, A. (2014, December). A Security Evaluation of AIS. Trend Micro Research Paper. Retrieved from https://www.trendmicro.com/ cloud-content/us/pdfs/security-intelligence/whitepapers/wp-a-security-evaluation-of-ais.pdf
• [3] Cutlip, K. (2017, March 31). AIS for Safety and Tracking: A Brief History. Global Fishing Watch Web site. Retrieved from https://globalfishingwatch.org/data/ais-for-safetyand-tracking-a-brief-history/
• [4] Ferguson, N., Schneier, B., & Kohno, T. (2010). Cryptography Engineering: Design Principles and Practical Applications. New York: John Wiley & Sons.
• [5] Goudossis, A., & Katsikas, S.K. (2019, June). Towards a secure automatic identification system (AIS). Journal of Marine Science and Technology, 24(2), 410-423. https://doi.org/10.1007/s00773-018-0561-3
• [6] Goudossis, A., Kostis, T., & Nikitakos, N. (2012). Automatic identification system stated requirements for naval transponder security assurance. In A. Goudossis, T. Kostis, & N. Nikitakos (Eds.), Proceedings of the 2nd International Conference on Applications of Mathematics and Informatics in Military Sciences (AMIMS), Vari, Greece
• [7] Hall, J., Lee, J., Benin, J., Armstrong, C., & Owen, H. (2015). IEEE 1609 Influenced Automatic Identification System (AIS). In Proceedings of 2015 IEEE 81st Vehicular Technology Conference (VTC Spring), Glasgow, May 11-14, 2015, pp. 1-5. https://doi.org/10.1109 /VTCSpring.2015.7145867
• [8] International Association of Marine Aids to Navigation and Lighthouse Authorities (IALA). (2016, June). An Overview of AIS (Edition 2). IALA Guideline 1082. Retrieved from https://www.navcen.uscg.gov/pdf/ IALA_Guideline_1082_An_Overview_of_AIS.pdf
• [9] International Maritime Organization (IMO). (2002, July 1). International Convention for the Safety of Life at Sea (SOLAS), Chapter V (Safety of Navigation), Regulation 19 (Carriage requirements for shipborne navigational systems and equipment). Retrieved from https://mcanet.mcga.gov.uk /public/c4/solas/index.html
• [10] International Telecommunication Union (ITU). (2014, February). Technical characteristics for an automatic identification system using time division multiple access in the VHF maritime mobile frequency band. ITU-R Recommendation M.1371-5. M Series: Mobile, radiodetermination, amateur and related satellite services. Retrieved from https://www.itu.int/ dms_pubrec/itu-r/rec/m/R-REC-M.1371-5-201402-I!!PDFE.pd
• [11] International Telecommunication Union (ITU). (2015, March). Assignment and use of identities in the maritime mobile service. ITU-R Recommendation M.585-7. M Series: Mobile, radiodetermination, amateur and related satellite services. Retrieved from https://www.itu.int/dms_pubrec/itu-r/rec/m/R-RECM.585-7-201503-I!!PDF-E.pdf
• [12] Kessler, G.C. (2019, October 14). AIS Research Using a Raspberry Pi. Retrieved from https://www.garykessler.net/library/ais_pi.html
• [13] Kessler, G.C., Craiger, J.P., & Haass, J. (2018, September). A Taxonomy Framework for Maritime Cybersecurity: A Demonstration Using the Automatic Identification System. TransNav, The International Journal on Marine Navigation and Safety of Sea Transportation, 12(3), 429-437. https://doi.org/10.12716/1001.12.03.01
• [14] National Marine Electronics Association (NMEA). (2019). NMEA 0183 Interface Standard. Retrieved from https://www.nmea.org/content/STANDARDS/NMEA_0 183_Standard
• [15] National Marine Electronics Association (NMEA). (2019). NMEA 2000® Interface Standard. Retrieved from https://www.nmea.org/content/STANDARDS/ NMEA_2000
• [16] National Marine Electronics Association (NMEA). (2019). OneNet Standard for IP Networking of Marine Electronic Devices. Retrieved from https://www.nmea.org/content/STANDARDS/OneNet
• [17] Oh, S.H., Seo, D., & Lee, B. (2015). S3 (secure ship-toship) information sharing scheme using ship authentication in the e-navigation. International Journal of Security and its Applications, 9(2),97–110.
• [18] Trend Micro Warns Of Vulnerabilities In Global Vessel Tracking Systems. (2017, February 3). Firstpost Web site. Retrieved from https://www.firstpost.com/business/ biztech/business-tech/security/trend-micro-warns-ofvulnerabilities-in-global-vessel-tracking-systems1895547.html
• [19] U.S. Coast Guard (USCG). (2014, June 4). Encrypted Automatic Identification System (EAIS) Interface Design Description (IDD). Command, Control, and Communications Engineering Center (C3Cen).Retrieved from https://epic.org/foia/dhs/uscg/nais/EPIC-15-05-29USCG-FOIA-20151030-Production-2.pdf
• [20] U.S. Coast Guard (USCG). (2019, August 14). AIS Requirements. USCG Navigation Center Web site. Retrieved from https://www.navcen.uscg.gov/? pageName= AISRequirementsRev

Uwagi

Opracowanie rekordu ze środków MNiSW, umowa Nr 461252 w ramach programu "Społeczna odpowiedzialność nauki" - moduł: Popularyzacja nauki i promocja sportu (2020)