海運分野のサイバーセキュリティ訓練不足を解明(Researchers Find Training Gaps Impacting Maritime Cybersecurity Readiness)

2026-03-25 ジョージア工科大学

ジョージア工科大学の研究は、海事分野におけるサイバーセキュリティ対策の不備の主因が「人材教育・訓練の不足」にあることを明らかにした。調査では、船舶運航や港湾管理に関わる人員がサイバー攻撃への対応能力を十分に備えておらず、技術導入だけではリスク低減に不十分であることが示された。特に訓練内容の標準化不足や実践的演習の欠如が課題であり、組織横断的な教育体制の整備が必要とされる。研究は、人的要因を含めた包括的対策の重要性を強調し、海事インフラの安全性向上に向けた指針を提示している。

海運分野のサイバーセキュリティ訓練不足を解明(Researchers Find Training Gaps Impacting Maritime Cybersecurity Readiness)

<関連情報>

サイバー脅威の海:船員の視点から見た海事サイバーセキュリティ A Sea of Cyber Threats: Maritime Cybersecurity from the Perspective of Mariners

Anna Raymaker, Akshaya Kumar, Miuyin Yong Wong, Ryan Pickren, Animesh Chhotaray, Frank Li, Saman Zonouz, Raheem Beyah
CCS ’25: Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security  Published: 22 November 2025
DOI:https://doi.org/10.1145/3719027.3744816

Abstract

Maritime systems, including ships and ports, are critical components of global infrastructure, essential for transporting over 80% of the world’s goods and supporting internet connectivity. However, these systems face growing cybersecurity threats, as highlighted by recent attacks disrupting Maersk, one of the world’s largest shipping companies, causing widespread impacts on international trade and shipping. The unique challenges of the maritime environment-including diverse operational conditions, extensive physical access points, fragmented regulatory frameworks, and its deeply interconnected, international structure—require maritime-specific cybersecurity research. Despite the sector’s critical importance, maritime cybersecurity remains an underexplored area, leaving significant gaps in our understanding of its challenges and risks.

To take an early step in addressing these gaps, we investigate how operators of maritime systems perceive and navigate cybersecurity challenges within the complex maritime landscape. We conducted a user study comprising surveys and semi-structured interviews with 21 officer-level mariners. Participants reported direct experiences with shipboard cyber-attacks, including offshore GPS spoofing and logistics-disrupting ransomware, demonstrating the real-world impact of these threats. Despite this, our findings reveal systemic and human-centric issues, such as cybersecurity training that is poorly designed to address the unique challenges of maritime operations, insufficient detection and response solutions, and severe gaps in mariners’ understanding of cybersecurity. Our contributions include a detailed categorization of cyber threats identified by mariners, as well as actionable recommendations for improving maritime security, including enhancements to cybersecurity training, attack response protocols, and regulatory frameworks. These insights aim to guide future research and policy to bolster the resilience of maritime systems against evolving cyber threats.

1604情報ネットワーク
ad
ad
Follow
ad
タイトルとURLをコピーしました