Leveraging on-board computing in autonomous ferries to identify malicious network connections

The advancement of autonomous ferry technology has revolutionized maritime transportation, offering improved efficiency and connectivity. However, this increased reliance on digital systems has simultaneously exposed ferry operations to significant cybersecurity threats, particularly from ransomware attacks and malicious network activities. As the maritime sector embraces automation, vulnerabilities to cyberattacks can disrupt operations, endanger passenger safety, and incur substantial financial losses. In this paper, we introduce a novel framework aimed at identifying and analyzing ransomware vulnerabilities in autonomous ferries, focusing on issues related to over-the-air updates, hotspot connections, and insider threats. Moreover, a simulation framework is presented that examines the financial implications of adversarial attacks on autonomous ferries. Ransomware attacks targeted and disrupted ferry operations, immobilizing multiple vessels. To counter this threat, the study employs an SVM-based model to mitigate ransomware spread, enhancing the resilience of autonomous ferries and safeguarding their uninterrupted collaborative operations. The findings highlight the urgent need for enhanced cybersecurity measures and illustrate how proactive detection and analysis can mitigate risks associated with ransomware attacks.