Abstract: A method, system and product for identifying spoofed maritime signals using information from other vessels. The method comprises obtaining one or more location-reporting signals of a maritime vessel, wherein the one or more location-reporting signals comprise one or more respective sets of geographical coordinates, each of which having a timestamp. The method further comprises determining that the one or more location-reporting signals are at least partially fabricated, wherein said determining is based on a contradiction between a content of the one or more location-reporting signals and information derived from location-reporting signals received from other maritime vessels. The method further comprises performing a responsive action.

Abstract: A method, system and product for identifying spoofed maritime signals based on receiving reception stations. The method comprises obtaining one or more location-reporting signals of a maritime vessel, wherein the one or more location-reporting signals comprise one or more respective sets of geographical coordinates, each of which having a timestamp. The method further comprises determining that the one or more location-reporting signals are at least partially fabricated. The determination comprises: identifying a station that received the one or more location-reporting signals, wherein the station having a reception polygon; and determining that at least one set of geographical coordinates indicated by the one or more location-reporting signals is fabricated based on the reception polygon of the station. The method further comprises performing a responsive action.

Abstract: A method, system and product for dead reckoning-based analysis of fabricated maritime data. The method comprises determining an initial location of the maritime vessel; determining speed and heading information using the location-reporting signals; computing estimated location of the maritime vessel at a specific time, based on the initial location and based on the speed and heading information; comparing the estimated location with a reported location at the time according to location-reporting signals; based on the comparison, determining that the location-reporting signals are at least partially fabricated; and in response to the determination that the location-reporting signals are at least partially fabricated, performing a responsive action.

Abstract: An apparatus, method and computer readable medium, the method comprising: obtaining raw maritime data from a plurality of sources, the raw maritime data indicative of a geolocation of vessels at different times and comprises duplicative data obtained from separate sources; analyzing the raw maritime data to produce for each vessel a vessel story comprising a set of activities and corresponding timestamps, wherein the set of activities associated with each vessel is smaller by at least one order of magnitude than the raw maritime data associated with the each vessel; identifying a pattern in the vessel story associated with a vessel, wherein the pattern conforms with a risk event; and validating the risk event using the raw maritime data or vessel stories, whereby identifying the risk event using reduced resources than required to identify the risk event in the raw maritime data, and without increasing false positive metrics.

Abstract: Method, system and product for risk event identification in maritime data and usage thereof. Ram maritime data is analyzed to produce for each vessel a vessel story. The vessel story comprises a set of activities and corresponding timestamps, that are deduced from the raw maritime data. A pattern, that conforms with a risk event, in the vessel story associated with a vessel. The risk event is validated using the raw maritime data or using one or more vessel stories. So, the risk event is identified using reduced resources in comparison with resources required to identify the risk event in the raw maritime data, and without increasing false positive metrics. Additionally, or alternatively, a pattern, that conforms with a risk event, in the vessel story associated with a first vessel is identified. The risk event is validated using the vessel story associated with a second vessel.