A Systematic Literature Review of Cybersecurity Risks in Autonomous and Digitalised Maritime Systems
Main Article Content
Abstract
The maritime industry is experiencing rapid digitalisation driven by the adoption of autonomous vessels, cyber–physical systems, artificial intelligence, Internet of Things (IoT) technologies, and extensive ship–shore connectivity. While these developments enhance operational efficiency, safety, and sustainability, they have simultaneously expanded the cyber-attack surface of maritime systems. This study synthesises contemporary research on cybersecurity risks in autonomous and digitalised maritime environments. Following the Preferred Reporting Items for Systematic Reviews and Meta-Analyses (PRISMA) 2020 guidelines, 52 peer-reviewed studies published between 2018 and 2025 were analysed from Scopus, Web of Science, IEEE Xplore, ScienceDirect, and ResearchGate. The review categorises the literature into three dominant themes: (i) cybersecurity risk assessment and management frameworks, (ii) vulnerabilities and threat vectors in maritime cyber–physical systems, and (iii) human, regulatory, and validation challenges. Findings reveal increasing reliance on hybrid risk assessment models integrating safety analysis techniques with cybersecurity taxonomies such as Adversarial Tactics, Techniques, and Common Knowledge (MITRE ATT&CK), alongside emerging AI-driven approaches. However, persistent gaps remain in real-world validation, regulatory harmonisation, and human-factor integration. The study concludes that resilient autonomous maritime operations depend on empirically grounded, human-centred, and standardised cybersecurity frameworks. It further recommends future research focusing on real-world validation, regulatory harmonisation, and maritime-specific cybersecurity training.
Article Details
This work is licensed under a Creative Commons Attribution 4.0 International License.
Alvarez, C., Hinojosa, C., Gonzalez, S., & Rojas, L. (2023). Towards Cybersecure Maritime Supply Chains in Latin America and the Caribbean. In Lecture Notes in Logistics: Vol. Part F268. https://doi.org/10.1007/978-3-031-32032-3_19
Bauk, S. (Ed.). (2025). Maritime cybersecurity. Springer. https://doi.org/10.1007/978-3-031-87290-7
Elsisi, M., Yu, J. T., Lai, C. C., & Su, C. L. (2024). A Drone-Assisted Deep Learning-Based IoT System for Monitoring Ship Emissions in Ports Considering Adversarial Attacks. IEEE Transactions on Instrumentation and Measurement, 73. https://doi.org/10.1109/TIM.2024.3374306
Goudossis, A., & Katsikas, S. K. (2019). Towards a secure Automatic Identification System (AIS). Journal of Marine Science and Technology, 24, 410–423. https://doi.org/10.1007/s00773-018-0561-3
Jo, Y., Choi, O., You, J., Cha, Y., & Lee, D. H. (2022). Cyberattack Models for Ship Equipment Based on the MITRE ATT&CK Framework. Sensors, 22(5). https://doi.org/10.3390/s22051860
Karaca, I., & Söner, ö. (2023). An evaluation of students’ cybersecurity awareness in the maritime industry. International Journal of 3D Printing Technologies and Digital Industry, 7(1). https://doi.org/10.46519/ij3dptdi.1236264
Karim, M. S. (2022). Maritime cybersecurity and the IMO legal instruments: Sluggish response to an escalating threat? Marine Policy, 143. https://doi.org/10.1016/j.marpol.2022.105138
Kavallieratos, G., Katsikas, S., & Gkioulos, V. (2019). Cyber-attacks against ship systems: A systematic literature review. Journal of Marine Science and Engineering, 7(10), 352. https://doi.org/10.3390/jmse7100352
Kayisoglu, G., Bolat, P., & Tam, K. (2022). Evaluating SLIM-based human error probability for ECDIS cybersecurity in maritime. Journal of Navigation, 75(6). https://doi.org/10.1017/S0373463322000534
Kayişoğlu, G., Güneş, B., & Bolat, P. (2024). ECDIS Cyber Security Dynamics Analysis based on the Fuzzy FUCOM Method. Transactions on Maritime Science, 13(1). https://doi.org/10.7225/toms.v13.n01.w09
Kessler, G. C., Craiger, J. P., & Haass, J. C. (2018). A taxonomy framework for maritime cybersecurity: A demonstration using the Automatic Identification System. TransNav: International Journal on Marine Navigation and Safety of Sea Transportation, 12(3), 429–437. https://doi.org/10.12716/1001.12.03.01
Kitchenham, B., & Charters, S. (2007). Guidelines for performing systematic literature reviews in software engineering (EBSE Technical Report EBSE-2007-01). Keele University. https://www.elsevier.com/__data/promis_misc/525444systematicreviewsguide.pdf
Loomis, W., Singh, V. V., Kessler, G. C., & Bellekens, X. (2021). A system of systems: Cooperation on maritime cybersecurity. Atlantic Council. https://www.atlanticcouncil.org/in-depth-research-reports/report/cooperation-on-maritime-cybersecurity-a-system-of-systems.
Martínez, F., Sànchez, L. E., Santos-Olmo, A., Rosado, D. G., & Fernàndez-Medina, E. (2024). Maritime cybersecurity: protecting digital seas. International Journal of Information Security, 23(2). https://doi.org/10.1007/s10207-023-00800-0
Melnyk, O., Onyshchenko, S., Onishchenko, O., Lohinov, O., & Ocheretna, V. (2023). Integral approach to vulnerability assessment of ship’s critical equipment and systems. Transactions on Maritime Science, 12(1).
Melnyk, O., Onyshchenko, S., Pavlova, N., Kravchenko, O., & Borovyk, S. (2022). Integrated Ship Cybersecurity Management as a Part of Maritime Safety and Security System. IJCSNS International Journal of Computer Science and Network Security, 22(3).
Nguyen, D., Vadaine, R., Hajduch, G., Garello, R., & Fablet, R. (2019). GeoTrackNet: Maritime anomaly detection using AIS data
Omojowo F. A., Edgar Osaghae, and Taiwo Kolajo. (2025). Evaluating covid-19 public discourse for sentiment, topic, and geolocation analysis. J. Electr. Syst. Inf. Technol., 12(1):15.
Omojowo F. A. (2026). Topic evolution in social media discourse during global health emergencies. J. Electr. Syst. Inf. Technol., 13(1):7.
Oruc, A., Chowdhury, N., & Gkioulos, V. (2024). A modular cyber security training programme for the maritime domain. International Journal of Information Security, 23, 1477–1512. https://doi.org/10.1007/s10207-023-00799-4.
Page, M. J., McKenzie, J. E., Bossuyt, P. M., Boutron, I., Hoffmann, T. C., Mulrow, C. D., et al. (2021). The PRISMA 2020 statement: An updated guideline for reporting systematic reviews. BMJ, 372, n71. https://doi.org/10.1136/bmj.n71
Svilicic, B., Brčić, D., Žuškin, S., & Kalebić, D. (2019). Raising awareness on cyber security of ECDIS. TransNav, 13(1), 231–236. https://doi.org/10.12716/1001.13.01.24
Tam, K., & Jones, K. (2019). Maritime cybersecurity policy: The scope and impact of evolving technology on international shipping. Journal of Cyber Policy, 4(2), 147–164. https://doi.org/10.1080/23738871.2019.1596964
United Nations Conference on Trade and Development. (2023). Review of maritime transport 2023. United Nations. https://unctad.org/publication/review-maritime-transport-2023
Yoo, J., & Jo, Y. (2023). Formulating Cybersecurity Requirements for Autonomous Ships Using the SQUARE Methodology. Sensors, 23(11). https://doi.org/10.3390/s23115033
Yousaf, A., & Zhou, J. (2024). From sinking to saving: MITRE ATT &CK and D3FEND frameworks for maritime cybersecurity. International Journal of Information Security, 23(3). https://doi.org/10.1007/s10207-024-00812-4
Zhang, P., Wang, Y., Aujla, G. S., Jindal, A., & Al-Otaibi, Y. D. (2022). A blockchain-based authentication scheme for IoT-enabled maritime transportation systems. IEEE Transactions on Intelligent Transportation Systems. https://doi.org/10.1109/TITS.2022.3159485
Article Sidebar
