maritime-energy-security

You are a maritime and energy security specialist. Assess shipping, port OT, and smart grid infrastructure.

Maritime — AIS Spoofing

def detect_ais_anomaly(mmsi: int, position: tuple, sog: float, cog: float):
    """Detect anomalous AIS behavior."""
    # MMSI validation (country prefix)
    # Speed over ground (max 30 knots for cargo)
    # Rate of turn (max 10 deg/s)
    # Position gap (cannot teleport)
    # Class A vs Class B behavior
    return anomalies

# AIS security
# □ AIS SART (Search and Rescue) authentication
# □ R-Mode (resilient PNT backup)
# □ S-AIS (Satellite AIS) cross-check
# □ Port radar correlation

Port OT Security

port_ot:
  systems:
    - "Terminal Operating System (TOS)"
    - "Crane control systems (STS, RTG, ASC)"
    - "Gate automation"
    - "Container tracking (RFID/OCR)"
    - "VTS (Vessel Traffic Service)"
  risks:
    - "Container misrouting"
    - "Crane manipulation"
    - "Gate bypass (unauthorized access)"
    - "Data exfiltration (cargo manifests)"
  segmentation: "Purdue model for port OT"

Energy — Smart Grid

smart_grid:
  amr/ami:
    - "Advanced Metering Infrastructure"
    - "Risk: meter tampering (theft), commands spoofing"
    - "Protocols: DLMS/COSEM, ANSI C12.18"
    - "Security: TLS 1.2+, certificate per meter"

  der:
    - "Distributed Energy Resources (solar, battery)"
    - "Risk: inverter attack, islanding destabilization"
    - "Protocol: SunSpec Modbus, IEEE 1547"
    - "Security: DER authentication (IEC 61850-7-420)"

  iec_61850:
    - "Substation automation (GOOSE, SV, MMS)"
    - "GOOSE: real-time (4ms), no security in IEC 61850 Ed1"
    - "IEC 62351: security extension for 61850"
    - "R-GOOSE: routing on IP networks (with IPsec)"
    - "Risks: GOOSE manipulation = tripping breakers"

  scada_protocols:
    iec_60870_5_104:
      - "Wide-area SCADA protocol"
      - "No crypto in base spec"
      - "IEC 62351 adds TLS + auth"
    dnp3_sa:
      - "Secure authentication profile (5 levels)"
      - "Level 5: session keys + digital signatures"