{"id":"https://openalex.org/W4411726537","doi":"https://doi.org/10.1109/meco66322.2025.11049124","title":"Demonstrating Practical Attacks on Maritime Cyber-Physical Systems via Exposed NMEA Gateways","display_name":"Demonstrating Practical Attacks on Maritime Cyber-Physical Systems via Exposed NMEA Gateways","publication_year":2025,"publication_date":"2025-06-10","ids":{"openalex":"https://openalex.org/W4411726537","doi":"https://doi.org/10.1109/meco66322.2025.11049124"},"language":"en","primary_location":{"id":"doi:10.1109/meco66322.2025.11049124","is_oa":false,"landing_page_url":"https://doi.org/10.1109/meco66322.2025.11049124","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 14th Mediterranean Conference on Embedded Computing (MECO)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research.rug.nl/en/publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061582419","display_name":"Marten Struijk","orcid":null},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Marten Struijk","raw_affiliation_strings":["Bernoulli Institute, University of Groningen,Groningen,The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bernoulli Institute, University of Groningen,Groningen,The Netherlands","institution_ids":["https://openalex.org/I169381384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084154552","display_name":"Jeroen Pijpker","orcid":"https://orcid.org/0009-0008-8334-0655"},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Jeroen Pijpker","raw_affiliation_strings":["Bernoulli Institute, University of Groningen,Groningen,The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bernoulli Institute, University of Groningen,Groningen,The Netherlands","institution_ids":["https://openalex.org/I169381384"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018845377","display_name":"Fadi Mohsen","orcid":"https://orcid.org/0000-0003-3876-5781"},"institutions":[{"id":"https://openalex.org/I169381384","display_name":"University of Groningen","ror":"https://ror.org/012p63287","country_code":"NL","type":"education","lineage":["https://openalex.org/I169381384"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Fadi Mohsen","raw_affiliation_strings":["Bernoulli Institute, University of Groningen,Groningen,The Netherlands"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bernoulli Institute, University of Groningen,Groningen,The Netherlands","institution_ids":["https://openalex.org/I169381384"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I169381384"],"apc_list":null,"apc_paid":null,"fwci":2.1125,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.88045033,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9739000201225281,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9739000201225281,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.9729999899864197,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9510999917984009,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5952145457267761},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.559334933757782},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39684951305389404},{"id":"https://openalex.org/keywords/aeronautics","display_name":"Aeronautics","score":0.3808738589286804},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.33491694927215576},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.18881207704544067},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.11919459700584412}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5952145457267761},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.559334933757782},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39684951305389404},{"id":"https://openalex.org/C178802073","wikidata":"https://www.wikidata.org/wiki/Q8421","display_name":"Aeronautics","level":1,"score":0.3808738589286804},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.33491694927215576},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.18881207704544067},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.11919459700584412}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/meco66322.2025.11049124","is_oa":false,"landing_page_url":"https://doi.org/10.1109/meco66322.2025.11049124","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 14th Mediterranean Conference on Embedded Computing (MECO)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.rug.nl:publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","is_oa":true,"landing_page_url":"https://research.rug.nl/en/publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Struijk, M, Pijpker, J & Mohsen, F 2025, Demonstrating Practical Attacks on Maritime Cyber-Physical Systems via Exposed NMEA Gateways. in R Stojanovic, L Jozwiak & B Lutovac (eds), 2025 14th Mediterranean Conference on Embedded Computing, MECO 2025 - Proceedings. IEEE, 14th Mediterranean Conference on Embedded Computing, MECO 2025, Budva, Montenegro, 10/06/2025. https://doi.org/10.1109/MECO66322.2025.11049124","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:pure.rug.nl:openaire_cris_publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","is_oa":true,"landing_page_url":"https://hdl.handle.net/11370/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Struijk, M, Pijpker, J & Mohsen, F 2025, Demonstrating Practical Attacks on Maritime Cyber-Physical Systems via Exposed NMEA Gateways. in R Stojanovic, L Jozwiak & B Lutovac (eds), 2025 14th Mediterranean Conference on Embedded Computing, MECO 2025 - Proceedings. IEEE, 14th Mediterranean Conference on Embedded Computing, MECO 2025, Budva, Montenegro, 10/06/2025. https://doi.org/10.1109/MECO66322.2025.11049124","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pure.rug.nl:publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","is_oa":true,"landing_page_url":"https://research.rug.nl/en/publications/e7572889-7ef6-40aa-a9ca-2dd5a57b4ded","pdf_url":null,"source":{"id":"https://openalex.org/S4306400420","display_name":"University of Groningen research database (University of Groningen / Centre for Information Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I169381384","host_organization_name":"University of Groningen","host_organization_lineage":["https://openalex.org/I169381384"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Struijk, M, Pijpker, J & Mohsen, F 2025, Demonstrating Practical Attacks on Maritime Cyber-Physical Systems via Exposed NMEA Gateways. in R Stojanovic, L Jozwiak & B Lutovac (eds), 2025 14th Mediterranean Conference on Embedded Computing, MECO 2025 - Proceedings. IEEE, 14th Mediterranean Conference on Embedded Computing, MECO 2025, Budva, Montenegro, 10/06/2025. https://doi.org/10.1109/MECO66322.2025.11049124","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2911123865","https://openalex.org/W3153622979","https://openalex.org/W3167846600","https://openalex.org/W4291802714","https://openalex.org/W6628259416","https://openalex.org/W6862186151"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3004173571","https://openalex.org/W2390279801","https://openalex.org/W3019776739","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2546638913"],"abstract_inverted_index":{"Maritime":[0],"cyber-physical":[1],"systems":[2,30],"increasingly":[3],"depend":[4],"on":[5,65],"networked":[6],"components":[7],"for":[8,145],"navigation":[9,100],"and":[10,31,53,84,98],"coordination,":[11],"exposing":[12],"legacy":[13],"protocols":[14],"such":[15],"as":[16],"NMEA":[17,43,117],"0183":[18],"to":[19,106,132],"remote":[20],"exploitation.":[21],"While":[22],"previous":[23],"research":[24],"has":[25],"analyzed":[26],"vulnerabilities":[27],"in":[28],"onboard":[29],"maritime":[32,116],"protocols,":[33],"few":[34],"studies":[35],"have":[36],"demonstrated":[37],"practical":[38,120],"attacks":[39,93],"that":[40],"exploit":[41],"exposed":[42],"gateways":[44],"over":[45],"the":[46,89,104,123,142],"public":[47],"internet.In":[48],"this":[49],"paper,":[50],"we":[51],"categorize":[52],"demonstrate":[54,88],"four":[55],"realistic":[56],"attack":[57,113],"vectors":[58],"targeting":[59],"NMEA-over-TCP":[60],"interfaces,":[61],"identified":[62],"through":[63],"testing":[64],"a":[66],"certified":[67],"gateway":[68],"device.":[69],"These":[70],"include":[71],"Global":[72],"Positioning":[73],"System":[74,79],"(GPS)":[75],"spoofing,":[76],"Automatic":[77],"Identification":[78],"(AIS)":[80],"injection,":[81],"autopilot":[82],"manipulation,":[83],"resource":[85],"exhaustion.":[86],"We":[87],"feasibility":[90],"of":[91],"these":[92,133],"using":[94],"publicly":[95],"available":[96],"tools":[97],"emulated":[99],"software.Our":[101],"work":[102],"is":[103],"first":[105],"bridge":[107],"real-world":[108],"internet":[109],"exposure":[110],"with":[111],"hands-on":[112],"demonstrations":[114],"against":[115],"systems,":[118],"offering":[119],"insights":[121],"into":[122],"threat":[124],"landscape.":[125],"The":[126],"findings":[127],"reveal":[128],"how":[129],"unauthenticated":[130],"access":[131],"data":[134],"streams":[135],"can":[136],"compromise":[137],"critical":[138],"vessel":[139],"functions,":[140],"underscoring":[141],"urgent":[143],"need":[144],"improved":[146],"protocol-level":[147],"defenses.":[148]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}