Abstract Risks in maritime navigation linked to cyberthreats emerge, and they must be assessed together with the more traditional risks such as grounding or colliding another vessel, as now the latter might be the consequence of a cyberattack. The fields of mobility and transportation data see vulnerabilities of navigation systems jeopardising their normal use, and putting both users and their environment at risk. In this article, we propose a method based on expert knowledge for the risk assessment of cyberthreats in maritime transportation data. A specific focus is proposed on the AIS (Automatic Identification System), a world-wide message-based vessel localisation system that has demonstrated weaknesses allowing errors, falsification and spoofing of its transmitted data. The discovery of abnormal reporting cases is assessed by an expert-designed rule-based analysis frame resulting in the triggering of alerts and the assignment of risk levels, tailored to increase the awareness of the people in charge of monitoring the maritime traffic.

中文翻译：

---

一种基于专家的海上运输异常数据风险评估方法

摘要 与网络威胁相关的海上航行风险出现，必须与更传统的风险（例如搁浅或碰撞另一艘船）一起评估，因为现在后者可能是网络攻击的后果。移动和交通数据领域发现导航系统的脆弱性危及它们的正常使用，并使用户及其环境处于危险之中。在本文中，我们提出了一种基于专家知识的方法，用于对海上运输数据中的网络威胁进行风险评估。建议特别关注 AIS（自动识别系统），这是一种全球范围的基于消息的船舶定位系统，该系统已证明存在允许错误、伪造和欺骗其传输数据的弱点。