Abstract
This paper explores a covert network mapping approach to target autonomous ships using a discreet and elusive spying machine called SPi. Our research aims to design SPi as a small pocket-sized device, enabling it to remain concealed while scanning the ship’s information technology (IT) or operational technology (OT) systems. Once connected to the ship’s network, SPi initiates information gathering through our customized script. Additionally, SPi establishes a covert communication channel with an external attacker sailing outside the target ship. This enables the attacker to remotely access the SPi device to collect data, gain SPi control, and utilize SPi as a platform for launching further attacks on the ship. The focus of this research lies on ensuring SPi’s adaptability to diverse network configurations on target ship systems. We developed a spying machine that can effectively evade detection, extract comprehensive information about the ship’s IT and OT systems, and serves as a staging factor for launching future attacks.