AIS Spoofing Attacks and Some Tools
Explores vulnerability vectors in unauthenticated maritime AIS protocols and demonstrates tools for detecting and simulating RF spoofing.
Summary
Maritime cybersecurity researcher Dr. Gary Kessler demonstrates the mechanics of Automatic Identification System (AIS) spoofing attacks and introduces analytical tools to identify maritime positioning anomalies in the Hack the Seas Village [00:00].
Kessler breaks down the AIS radio frequency protocol and its integration with satellite constellations and vessel transponders [12:11, 36:45]. He analyzes real-world case studies of replay and geographic spoofing attacks—such as ghost vessels appearing at coordinates they occupied months prior [49:27]—explaining the absence of cryptographic authentication in global AIS broadcasts and showing how software-defined radios (SDRs) can manipulate commercial shipping tracking to evade sanctions or confuse collision-avoidance systems [01:03:13].
(AI summary — Gemini Flash)
Related talks
Village Interviews·1 min
A rapid spotlight on the Maritime Hacking Village exploring shipboard control networks, satellite navigation, and vessel cybersecurity at DEF CON 34.
Hack the Seas Village·1 hr 14 min
Gary Kessler
Demonstrates how to build an affordable Automatic Identification System (AIS) tracking station using a Raspberry Pi and RTL-SDR.
Hack the Seas Village·15 min
Gary Kessler
Presents a maritime tracking challenge on analyzing vessel paths and predicting single-point coordinates from RF telemetry.