CYBERSECURITY AND PRIVACY IN MARITIME SECURITY: THEORIES, CHALLENGES, CASE STUDIES AND FUTURE PROSPECTS

Abstract

The maritime domain plays a significant role in global trade, transportation, and security. However, with the increasing integration of digital technologies into maritime operations, cybersecurity and privacy have appeared as crucial concerns. This research article explores the theories underpinning cybersecurity and privacy in the maritime domain, identifies key challenges, and discusses future prospects for addressing these issues. Using a qualitative research methodology, existing literature, case studies, and technological advancements to provide insights into the current state of maritime cybersecurity have been analyzed. Scientific databases (Web of Science, Scopus, EBSCO, Google Scholar, DOAS, and TR Dizin), books, reports, and bulletins has been main research areas. The topics, titles, abstracts, and keywords including “cybersecurity”, “cyber”, “security”, “maritime security”, “marine security”, and “privacy” has been analyzed. Most read, downloaded and cited documents and papers have been researched, analyzed, and studied. Case studies have been also observed and included to the article. Our findings highlight the need for robust frameworks, international collaboration, and advanced technologies to mitigate risks and ensure secure and private maritime operations.

Keywords

• cybersecurity
• privacy
• maritime
• marine
• security

CYBERSECURITY AND PRIVACY IN MARITIME SECURITY: THEORIES, CHALLENGES, CASE STUDIES AND FUTURE PROSPECTS

Abstract

Denizcilik alanı küresel ticaret, ulaşım ve güvenlikte önemli bir rol oynamaktadır. Ancak dijital teknolojilerin denizcilik operasyonlarına giderek daha fazla entegre olmasıyla birlikte siber güvenlik ve gizlilik önemli endişeler olarak ortaya çıkmıştır. Bu araştırma makalesi, denizcilik alanında siber güvenlik ve gizliliğin altında yatan teorileri incelemekte, temel zorlukları belirlemekte ve bu sorunların ele alınmasına yönelik gelecekteki beklentileri tartışmaktadır. Nitel araştırma metodolojisi kullanılarak mevcut literatür, vaka çalışmaları ve teknolojik gelişmeler analiz edilerek denizcilikte siber güvenliğin güncel durumu hakkında fikir edinilmiştir. Bilimsel veri tabanları (Web of Science, Scopus, EBSCO, Google Scholar, DOAS ve TR Dizin), kitaplar, raporlar ve bültenler başlıca araştırma alanları olmuştur. “Siber güvenlik”, “siber”, “güvenlik”, “denizcilik güvenliği”, “deniz bilimleri güvenliği” ve “gizlilik” gibi konular, başlıklar, özetler ve anahtar kelimeler analiz edilmiştir. En çok okunan, indirilen ve atıfta bulunulan dokümanlar ve makaleler araştırılmış, analiz edilmiş ve incelenmiştir. Bu makalede vaka çalışmaları da gözlemlenmiş ve çalışmaya dahil edilmiştir. Bulgularımız; riskleri azaltmaya, güvenli ve özel denizcilik operasyonlarını sağlamak için gerçek çerçevelere, uluslararası iş birliklerine ve gelişmiş teknolojilere olan ihtiyacı vurgulamaktadır.

Keywords

• siber güvenlik
• gizlilik
• denizcilik
• deniz bilimleri
• güvenlik

References

1. Adil, M., Khan, M. K., Kumar, N., Attique, M., Farouk, A., Guizani, M., and Jin, Z. P. (2024). Healthcare internet of things: security threats, challenges, and future research directions. IEEE Internet of Things Journal, 11(11), 19046–19069. https://doi.org/10.1109/JIOT.2024.3360289
2. Afenyo, M., and Caesar, L. D. (2023). Maritime cybersecurity threats: gaps and directions for future research. Ocean & Coastal Management, 236. https://doi.org/10.1016/j.ocecoaman.2023.106493
3. Akdag, M., Solnor, P., and Johansen, T. A. (2022). Collaborative collision avoidance for maritime autonomous surface ships: a review. Ocean Engineering, 250. https://doi.org/10.1016/j.oceaneng.2022.110920
4. Altunay, H. C. (2024). Analysis of cyber attacks using honeypot. Black Sea Journal of Engineering and Science, 7(5), 954–959. https://doi.org/10.34248/bsengineering.1531420
5. Avcı, İ. (2023). Cyber-attacks and measures in smart transportation systems. Akıllı Ulaşım Sistemleri ve Uygulamaları Dergisi, 6(1), 194–208. https://doi.org/10.51513/jitsa.1224909
6. Berghout, T., Benbouzid, M., and Muyeen, S. M. (2022). Machine learning for cybersecurity in smart grids: a comprehensive review-based study on methods, solutions, and prospects. International Journal of Critical Infrastructure Protection, 38. https://doi.org/10.1016/j.ijcip.2022.100547
7. Bolbot, V., Van Coillie, A. (2023). A novel risk assessment process: application to an autonomous inland waterways ship. Proceedings of The Institution of Mechanical Engineers Part O-Journal of Risk and Reliability, 237(2), 436–458. https://doi.org/10.1177/1748006X211051829
8. Božić, V. (2023). Integrated risk management and artificial intelligence in hospital. Journal of AI, 7(1), 63–80. https://doi.org/10.61969/jai.1329224

9. Chaal, M., Ren, X., BahooToroody, A., Basnet, S., Bolbot, V., Banda, O. A. V, and Van Gelder, P. (2023). Research on risk, safety, and reliability of autonomous ships: a bibliometric review. Safety Science, 167. https://doi.org/10.1016/j.ssci.2023.106256
10. Coşar, H. İ., Arısoy, Ç., and Ulutaş, H. (2024). Intrusion detection on CSE-CIC-IDS2018 dataset using machine learning methods. Artificial Intelligence Theory and Applications, 4(2), 143–154. https://dergipark.org.tr/tr/pub/aita/issue/87553/1553769
11. Damar, M., Özen, A., and Yılmaz, A. (2024). Cybersecurity in the health sector in the reality of artificial intelligence, and information security conceptually. Journal of AI, 8(1), 61–82. https://doi.org/10.61969/jai.1466340
12. Demirezen, M. U., and Selcen Navruz, T. (2023). Lambda architecture-based big data system for large-scale targeted social engineering email detection. International Journal of Information Security Science, 12(3), 29–59. https://doi.org/10.55859/ijiss.1338813
13. Durlik, I., Miller, T., Kostecka, E., Zwierzewicz, Z., and Lobodzinska, A. (2024). Cybersecurity in autonomous vehicles-are we ready for the challenge? Electronics, 13(13). https://doi.org/10.3390/electronics13132654
14. Eren, T., Sanlı, Y. B., Baltacı, F., and Güven, E. (2024). Bibliometric analysis on cybersecurity studies. Bilişim Teknolojileri Dergisi, 17(3), 223–229. https://doi.org/10.17671/gazibtd.1473206
15. Gençoğlu, M. T. (2022). Mathematical modeling of cyber attack and defense. Bilgisayar Bilimleri ve Teknolojileri Dergisi, 3(1), 10–16. https://doi.org/10.54047/bibted.997908
16. Jo, Y., Choi, O., You, J., Cha, Y., and Lee, D. H. (2022). Cyberattack models for ship equipment based on the MITRE attack framework. Sensors, 22(5). https://doi.org/10.3390/s22051860
17. Jovic, M., Tijan, E., Brcic, D., and Pucihar, A. (2022). Digitalization in maritime transport and seaports: bibliometric, content and thematic analysis. Journal of Marine Science and Engineering, 10(4). https://doi.org/10.3390/jmse10040486
18. Kampourakis, V., Gkioulos, V., and Katsikas, S. (2023). A systematic literature review on wireless security test beds in the cyber-physical realm. Computers & Security, 133. https://doi.org/10.1016/j.cose.2023.103383
19. Kanwal, K., Shi, W. M., Kontovas, C., Yang, Z. L., and Chang, C. H. (2024). Maritime cybersecurity: are onboard systems ready?, Maritime Policy & Management, 51(3), 484–502. https://doi.org/10.1080/03088839.2022.2124464
20. Kechagias, E. P., Chatzistelios, G., Papadopoulos, G. A., and Apostolou, P. (2022). Digital transformation of the maritime industry: a cybersecurity systemic approach. International Journal of Critical Infrastructure Protection, 37. https://doi.org/10.1016/j.ijcip.2022.100526
21. Khandker, S., Turtiainen, H., Costin, A., and Hämäläinen, T. (2022). Cybersecurity attacks on software logic and error handling within ais implementations: a systematic testing of resilience. IEEE Access, 10, 29493–29505. https://doi.org/10.1109/ACCESS.2022.3158943
22. Park, C., Kontovas, C., Yang, Z. L., and Chang, C. H. (2023). A BN driven FMEA approach to assess maritime cybersecurity risks. Ocean & Coastal Management, 235. https://doi.org/10.1016/j.ocecoaman.2023.106480
23. Popli, M. S., Singh, R. P., Popli, N. K., and Mamun, M. (2025). A federated learning framework for enhanced data security and cyber intrusion detection in distributed network of underwater drones. IEEE Access, 13, 12634–12646. https://doi.org/10.1109/ACCESS.2025.3530499
24. Qiao, M. Y., Wei, L. F., Han, D. Z., and Wu, H. F. (2025). Efficient multi-party PSI and its application in port management. Computer Standards & Interfaces, 91. https://doi.org/10.1016/j.csi.2024.103884
25. Tedeschi, P., Sciancalepore, S., and Di Pietro, R. (2022). Satellite-based communications security: A survey of threats, solutions, and research challenges. Computer Networks, 216. https://doi.org/10.1016/j.comnet.2022.109246
26. Topal, M., and Altan, Z. (2024). Impact of digital signing on malware in public key infrastructure. International
27. Journal of Management Information Systems and Computer Science, 8(2), 99–109. https://doi.org/10.33461/uybisbbd.1507316
28. Wang, W. (2024). Innovative strategies and forward thinking on China’s digital maritime law enforcement. Marine Policy, 169. https://doi.org/10.1016/j.marpol.2024.106369
29. Yoşumaz, İ. (2024). An examination of cyber security solutions in public and private IaaS infrastructures. International Journal of Information Security Science, 13(3), 1–29. https://doi.org/10.55859/ijiss.1475423