NMEA 2000 is a communication protocol used aboard ships to exchange navigation and sensor data between different systems. As multiple devices have access to the same network, the integrity and reliability of these data represent an important cybersecurity concern.
The objective of this thesis is to experimentally investigate the cybersecurity and potential vulnerabilities of NMEA 2000 networks. The student will first study the operation and architecture of NMEA 2000, with particular attention to CAN-bus communication, message identifiers and Parameter Group Numbers (PGNs).
A small-scale model system will subsequently be developed in which different shipboard devices are emulated using Arduino, ESP32 or similar microcontroller boards equipped with CAN interfaces. These devices can, for example, simulate a GNSS receiver, compass, speed sensor or other navigation sensor and transmit realistic NMEA 2000 messages over a common CAN bus.
Controlled cybersecurity scenarios will then be investigated on this experimental setup, including interception and analysis of network traffic, message injection or modification, transmission of false sensor data and disruption of normal communication. The student will investigate which attacks are possible, how they affect the reliability of the available navigation data, and how such manipulation could be detected or mitigated.