Maritime Cybersecurity

Grey-Zone Operations at Sea: Maritime Cyber Infrastructure as an Arena for Strategic Signalling

Abstract:

Cyber operations targeting maritime infrastructure are commonly framed as technical disruptions designed to inflict physical or economic harm. This paper argues that many such incidents function instead as strategic signalling. The maritime domain’s mixed civilian-commercial structure and fragmented governance make it especially conducive to grey-zone and hybrid warfare, where strategic signalling plays a prominent role. Recognizing maritime cyber activity as strategic communication is essential for calibrated responses and escalation management. Examining cases of maritime cyber disruption from 2021 to 2025, this paper identifies patterns of amplified narratives, increasing use of AIS (Automatic Identification System) and GNSS (Global Navigational Satellite System) manipulation, and evidence of preparation for future contingencies.

Published In

Volume 25, Issue 3

Evaluating Vessel Cyberattacks: Are the Risks Exaggerated or a Genuine Threat?

Abstract:

In the last 10 years, publicly reported cyberattacks in the maritime sector have increased by more than 1000%, going from 4 in 2015 to 92 attacks in 2023, 80 in 2024, and 51 in 2025. Having said that, vessels themselves are less than 21% of those attacks. In addition, many of those cyber incidents relate to attacks on navigation and not actual compromises of the vessel systems themselves. Some researchers and industry insiders argue the threat to vessels is overblown, but is it? Using public incident data related to vessel and non-vessel cyberattacks, information on the capability and motivations of state and non-state cyber threat actors, the authors argue that cyberattacks on vessels remain a legitimate area of concern, and expectations that there should be large numbers of documented incidents to validate that position are unrealistic. The authors do, however, acknowledge the necessity to continually contest such assumptions given the limited data available.

Published In

Volume 25, Issue 3

Journal of Information Warfare

The definitive publication for the best and latest research and analysis on information warfare, information operations, and cyber crime. Available in traditional hard copy or online.

Keywords

(

2

3

4

8

9

A
AI
APT

a

B

C
C2
C2S
CDX
CIA
CIP
CPS

D
DNS
DoD
DoS

E

e

F

G

H

I
IA
ICS
ICT

i

J

K

L

M

N
NEC
NSA
NSS

O

P
PDA

Q

R

S
SOA

T

t

U

V

W

X
XRY

Y

Z

Quill Logo

The definitive publication for the best and latest research and analysis on information warfare, information operations, and cyber crime. Available in traditional hard copy or online.

SUBSCRIBE NOW

Get in touch

Registered Agent and Mailing Address

  • Journal of Information Warfare
  •  ArmisteadTEC
  • Dr Leigh Armistead, President
  • 1624 Wakefield Drive
  • Virginia Beach, VA 23455

 757.510.4574

 JIW@ArmisteadTec.com