# Comprehensive Analysis of Maritime Cybersecurity Landscape Based on the NIST CSF v2.0
## 5 NIST CSF-Based Analysis of Maritime Cybersecurity
### Protect
#### 5.3.3 Data Security  
The NIST CSF's v2.0 data security category underscores the necessity of protective measures to maintain the confidentiality, integrity, and accessibility of data. This is achieved through the application of various controls, such as access restrictions, cryptographic techniques, and data backup procedures, designed to fend off unauthorised access, unintended alterations, or unintentional data loss. The primary goal is to erect robust defences that ensure the enduring security and resiliency of an organisation's data amidst potential cybersecurity threats and risks. Consolidating the articles within the purview of maritime and data security, we find several compelling themes and methodologies for mitigating cyber threats. [PERSON] et al. [60] proposed an MQTT protocol-based method to protect shipboard data servers by controlling message frequency, which consequently reduces the threat of DDoS attacks. [PERSON] et al. [81] focused on AI technology's cybersecurity implications in the context of autonomous ships, applying the SQUARE methodology to identify vulnerabilities and envisage cyberattack scenarios. In a similar vein, [PERSON] et al. [82] delved into the variety of challenges that come with securing the maritime environment. [PERSON] et al. identified cybersecurity concerns for voyage data recorders (VDRs) on ships, which are crucial for accident investigation. Using failure mode and effects analysis (FMEA), they identified vulnerabilities and potential cyber threats such as false information and command injection. In response to these threats, their research proposed detailed preventative measures to enhance VDR cybersecurity, contributing significantly to ship safety management systems. Meanwhile, [PERSON] et al. [83] emphasized ethical considerations in maritime cybersecurity research. Their article explored six ethical principles and four categories of ethical dilemmas that may arise in this domain, providing specific examples and guidelines that can guide researchers in maintaining data security while adhering to ethical research practices in the maritime cybersecurity sector. This research underscores the necessity of balancing robust cybersecurity measures with ethical considerations in the pursuit of secure maritime operations. [PERSON] et al. [84] presented a secure offloading scheme to optimize power allocation within the Space-Air-Aqua Integrated Network (SAAIN), yielding minimal offloading delay and improved data security. [PERSON] et al. 's [85] research delineated software-enhanced control within the Global Maritime Distress and Safety System (GMDSS), upscaling information processing security in maritime communication systems. Exploring the role of blockchain technology in maritime cybersecurity, [PERSON] et al. [86] suggested its application within maritime monitoring systems to protect navigation data and ensure data integrity. Similarly, [PERSON] et al. [87] proposed secure rate-splitting multiple access (RSMA) cooperation within maritime cognitive unmanned aerial vehicle (UAV) networks to enhance data security while optimizing transmission rates. Focusing on the vulnerabilities of existing maritime communication systems, [PERSON] et al. [88] highlighted the lack of authentication and encryption within the Automatic Identification System (AIS), advocating for improved data security. [PERSON] et al. [89] proposed an innovative combination of Message Authentication Code (MAC) and digital watermarking to validate AIS messages. [PERSON] et al. and [PERSON] et al. [90,91] both recognized the centrality of secure data transfer in maritime operations. [PERSON] et al. [90] focused on safeguarding data in maritime vessel networks while discussing the use of sensors to collect navigational information, IoT for transmitting data to the cloud, and a 64-bit two-fish algorithm for key management. The goal was to ensure safe data transit for efficient information transport. In a similar vein, [PERSON] et al.