Skip to main content
Ahmed Nagi Nasr

Ahmed Nagi Nasr

Early-Stage Researcher
Tallinn University of Technology
Ahmed Nagi Nasr is currently pursuing the Ph.D. degree with Estonian Maritime Academy, TalTech, specializing in the protection of autonomous systems and critical maritime infrastructure. He is a Cybersecurity Researcher. He actively contributes to major EU-funded projects, such as CyberSecPro and DigiMaris, applying offensive security methodologies to enhance the digital resilience of maritime platforms and the IoT environments. His current interests include advanced threat detection, the security of telemetry links for unmanned surface vessels (USVs), and the development of maritime security operations centers (M-SOC).

Speaker sessions

Briefings and Arsenals | Confirmed Speakers | No Session Assigned

Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.
  • 07:30
  • Tue
  • 01 Dec
Stage: Briefing Stage 2
Sessions Type: Keynote

ShipCrawler: AI-Powered Maritime OSINT Platform

The maritime sector — responsible for 90% of global trade — operates with a dangerously exposed attack surface. Vessels function as floating data centers running VSAT, ECDIS, GPS, AIS, and integrated bridge systems, yet most lack dedicated security monitoring. Meanwhile, an enormous volume of sensitive data leaks through public sources: crew social media, vessel tracking portals, port records, corporate registries, and credential dumps. ShipCrawler is an open-source automated OSINT tool purpose-built for maritime cyber reconnaissance. It aggregates, correlates, and reports on vessel, crew, company, and port authority intelligence from publicly available sources — Shodan, Censys, VirusTotal, Equasis, VesselFinder, MarineTraffic, Have I Been Pwned, and 15+ additional feeds — using AI-agent orchestration. This session presents the ShipCrawler architecture: a queue-based pipeline with three execution modes (sequential, parallel, phase-streaming) powered by worker agents. We walk through the 6-phase OSINT Maritime Framework from our IEEE Access publication, demonstrating live collection against real vessel targets. Beyond collection, ShipCrawler produces structured deliverables: intelligence reports, remediation playbooks, and Sigma/YARA detection rules. We also cover the Person OSINT module — researcher profiling and name-variation strategies — and the strategic roadmap toward VSAT honeypots, M-SOC integration, and the broader Project Haris maritime defence platform.
  • 14:40
  • Tue
  • 01 Dec
Stage: Arsenal 3
Sessions Type: Keynote

Proactive Maritime Defense: Weaponizing a 100-Tool OSINT Framework against Exposed Shipboard and Port Infrastructure

The maritime industry has seen a 900% surge in cyberattacks as ships and ports embrace rapid digitalization. Despite the critical nature of this infrastructure, security remains dangerously reactive. This session introduces a first-of-its-kind, specialized OSINT framework designed to transition maritime security from reactive patching to proactive defense.Moving beyond generic reconnaissance, we present a systematic five-phase workflow (Identification, Collection, Processing, Analysis, Dissemination) tailored specifically to the unique operational constraints of the maritime sector. The core of this session is a live technical deep-dive into a curated toolkit of over 100 specialized OSINT resources. We will demonstrate how to pivot through vessel tracking data, maritime search engines, and crew professional networks to uncover vulnerabilities that traditional scanners miss.To validate the framework, we will walk through a real-world case study revealing critical exposures found in modern port infrastructure, including:- Exposed shipboard Industrial Control Systems (ICS) and SCADA interfaces.- Unsecured VSAT and MikroTik communication links.- Vulnerable supply chain links and sensitive documentation leaked via unprotected NAS devices.
  • 16:00
  • Tue
  • 01 Dec
Stage: Briefing Stage 2
Sessions Type: Keynote