Towards the Creation of a Threat Intelligence Framework for Maritime Infrastructures Nikolaos Pitropakis 1(B ) , Marios Logothetis 2 , Gennady Andrienko 3 , Jason Stefanatos 4 , Eirini Karapistoli 5 , and Costas Lambrinoudakis 6 1 Blockpass Identity Lab, Edinburgh Napier University, Edinburgh, UK n.pitropakis@napier.ac.uk 2 INTRASOFT International SA, Luxembourg, Luxembourg 3 Fraunhofer Institute IAIS, Sankt Augustin, Germany 4 DNV GL, Oslo, Norway 5 Cyberlens, Amsterdam, The Netherlands 6 Department of Digital Systems, University of Piraeus, Piraeus, Greece Abstract. The maritime ecosystem has undergone through changes due to the increasing use of information systems and smart devices. The newly introduced technologies give rise to new attack surface in maritime infrastructures. In this position paper, we propose the MA ritime Threat IN telligence FRAME work (MAINFRAME), which is tailored towards collection and analysis of threat intelligence in maritime environments. MAINFRAME combines: (i) data collection from ship sensors; (ii) collec- tion of publicly available data from social media; (iii) variety of honeypots emulating different hardware and software component; (iv) event detec- tion assisted by deep learning; (v) blockchain implementation that main- tains audit trail for activities and transactions, and electronic IDs; and (vi) visual threat analytics. To highlight the interdependencies between cyber and cyber-physical threats in autonomous ships, MAINFRAME’s operation is evaluated through the liquefied natural gas (LNG) Carrier case study. Keywords: Maritime · Cybersecurity · Threat Intelligence 1 Introduction The marine industry is undergoing a digital transformation, implementing new innovative ICT (Information and Communication Technology) tools and services to optimize and further enhance its operations. The advent of new technologies (e.g. Supervisory Control and Data Acquisition - SCADA systems, IoT devices, Big Data) strengthens the maritime industry that currently experiences a new wave of globally connected digital services. The digital transformation has pos- itive implications to the maritime industry processes in operational efficiency, asset management, decision-making and many more. However, recent years have c  Springer Nature Switzerland AG 2020 S. Katsikas et al. (Eds.): ESORICS 2019 Workshops, LNCS 11980, pp. 53–68, 2020. https://doi.org/10.1007/978-3-030-42048-2_4