Cyber Threat Analysis of Maritime Cybersecurity Using AHP-Topsis

Abstract

This research aimed to provide an assessment of cyber threats to the maritime cybersecurity system in the Indonesian sea region. This research used the Analytic Hierarchy Process (AHP) and Technique for Order Preference By Similiarity To Ideal Solution (TOPSIS). AHP – TOPSIS is used to provide weight and comparison of threat values based on six maritime domain cyber threat criteria. Furthermore, cyber threats were identified based on five levels of cyber threats. Based on the research results, Human Factors (28.1%) were the most important criterion of the six evaluation components, followed by Man in the middle attack (MITM) (17%), Malware (16.2%), Outdated systems (15.4%), Phishing (15 %), and Thief of credentials (8.4%). The results of the evaluation of the threat level, Economics Fraud occupied the highest threat value of 0.628 with the Cyber Sabotage level category (Level 4). There were three threats included in the Cyber Incursion level (Level 3), including Value of cargo, Manipulation of signals used by ships, and IT-systems. Furthermore, six threats fell into the Cyber Theft category (Level 2), including Firewalls, Espionage on maritime operations, State-level threats, Misuse of AIS and data positioning, Insider threats, Computer Installations