How to Hack a Yacht

No ratings

Presented at ISHConference 2019 by

We owe it to a rather unusual coincidence to learn today about various possibilities of attack against modern yachts and ships. Due to the many interconnected systems on board a super yacht and the different attack vectors, I think the term "floating IoT" is more appropriate. Possible attacks against GPS (Global Positioning System), AIS (Automatic Identification System) and autopilot as well as their interdependencies are shown. Another attack vector is Internet connectivity. This is shown using a Maritime Internet Router and an Internet Satellite Communication Solution, what effects the discovered vulnerabilities can have.Spoiler first - it can go as far as the Engine Control Unit. NMEA2000, the maritime counterpart to the CAN bus in the automotive industry, is the link between IT and OT.