🛰️ 台灣灰色地帶與海底電纜監測

灰色地帶監測 深度文章

AIS 欺騙是什麼？

What Is AIS Spoofing?

假座標 • 身分冒用 • 軌跡型態偵測 • 台灣海域

Fake Positions • Identity Fraud • Pattern Detection • Taiwan Waters

本頁重點

In short

AIS 欺騙（spoofing）是船舶繼續廣播 AIS，但內容造假：假位置、假速度、假航向，甚至冒用其他船的 MMSI、船名或 IMO。與「走暗」（關閉 AIS）不同，欺騙是主動製造誤導。由於 AIS 由船舶自行填寫、無即時第三方驗證，本站靠物理與資料的內在矛盾來偵測它。

AIS spoofing is when a vessel keeps broadcasting AIS but the content is faked: false position, speed, or course, or even another ship's MMSI, name, or IMO. Unlike "going dark" (switching AIS off), spoofing actively creates a misleading picture. Because AIS is self-reported with no real-time third-party verification, this site detects it through physical and data inconsistencies.

延伸閱讀 RELATED → AIS 是什麼 暗船 評分方法論 詞彙表
一艘船的 AIS 顯示它正穩穩地航行在某條航道上。問題是：衛星雷達在另一個地方拍到了它，而它「廣播的位置」其實是一片它從未去過的海。

它沒有關掉 AIS——它在說謊。

AIS 欺騙是什麼？

AIS 欺騙（AIS spoofing）指的是船舶持續廣播 AIS 訊號，但訊號內容是偽造的。它和「走暗」（關閉 AIS）是兩種不同手法：走暗是消失，欺騙是主動製造一個假的自己。

之所以可能，是因為 AIS 的設計是自我回報：船上的設備把位置、速度、身分等資料填好後廣播出去，沒有一個即時的第三方在旁邊核對。只要動點手腳，廣播出去的就可以是任何數字。

A ship's AIS shows it cruising steadily down a shipping lane. The problem: satellite radar photographed it somewhere else, and its "broadcast position" is a patch of sea it never visited.

It didn't switch off AIS — it's lying.

What Is AIS Spoofing?

AIS spoofing is when a vessel keeps broadcasting AIS but the content is forged. It is a different tactic from "going dark" (switching AIS off): going dark is disappearing, spoofing is actively manufacturing a false version of yourself.

It is possible because AIS is self-reported: the onboard equipment fills in position, speed, and identity, then broadcasts it, with no real-time third party checking. Tamper with the inputs and the broadcast can say anything.

AIS 可以偽造什麼？

幾乎每個欄位都能被造假，常見的有：

📍
位置（GPS 座標）最常見：讓船「看起來」在數十甚至數百浬外，遠離它真正所在的敏感海域。
🚀
速度（SOG）與航向（COG）虛報慢速或錯誤航向，掩蓋真實的徘徊、繞行或加速逃離。
🆔
MMSI冒用另一艘合法船的識別碼，讓追蹤紀錄混淆，或借用乾淨身分。
🚢
船名與呼號頻繁更換或填入假名，切斷與既有可疑紀錄的連結。
🔢
IMO 編號理論上終身不變，卻被虛報或冒用，是高度可疑的訊號。
關鍵差別關閉 AIS 留下一段「空白」；AIS 欺騙則填滿一段「假資料」。前者讓你知道「有東西不見了」，後者試圖讓你根本不去懷疑——這也是為什麼欺騙往往比走暗更難察覺。

What Can Be Faked?

Almost every field can be forged. The common ones:

📍
Position (GPS coordinates)The most common: make the ship "appear" tens or hundreds of miles away from the sensitive waters it is really in.
🚀
Speed (SOG) & course (COG)Report a false slow speed or wrong heading to mask real loitering, circling, or a fast getaway.
🆔
MMSIBorrow another legitimate ship's identifier to confuse tracking or "wear" a clean identity.
🚢
Vessel name & call signChange frequently or enter a fake name to sever the link to existing suspicious records.
🔢
IMO numberMeant to be permanent for life, yet falsely reported or borrowed — a highly suspicious signal.
The Key DifferenceGoing dark leaves a "gap"; AIS spoofing fills that gap with "fake data." The former tells you something went missing; the latter tries to make sure you never get suspicious at all — which is why spoofing is often harder to spot than going dark.

如何偵測 AIS 欺騙？

既然 AIS 內容可以造假，偵測就不能只看「它說什麼」，而要找出它說的話彼此矛盾、或與物理／登記資料對不上的地方。本站評分引擎使用幾種型態：

⚡
不可能的速度把連續兩筆位置的距離除以時間，若得到的速度遠超船舶可能的上限（例如瞬間跳數百公里），代表位置被竄改。
🧭
航向與位移不符廣播的航向（COG）與「由位置實際算出的移動方向」差距過大，是資料造假的跡象。
⬜
方框軌跡（box pattern）出現多個近 90° 的轉折、且路徑封閉或範圍極小，是電腦生成假軌跡的典型特徵。
⭕
圓形軌跡（circle pattern）半徑變化極小、弧度接近完整圓——真實航行很少如此對稱，常是 GPS 干擾或人造訊號。
📑
登記不符廣播的船名、IMO 或呼號與 ITU 等公開登記資料對不上，顯示身分可能被冒用或虛報。

沒有任何單一型態能「證明」欺騙，但多項同時出現時，可信度就明顯下降。完整邏輯見 本站方法論。

How Is AIS Spoofing Detected?

Since the content can be faked, detection cannot rely on "what it says" — it has to find where the claims contradict each other, or clash with physics or registry data. This site's scoring engine uses several patterns:

⚡
Impossible speedDivide the distance between two consecutive positions by the time; if the implied speed far exceeds what a ship can do (e.g. jumping hundreds of km instantly), the position was tampered with.
🧭
Course vs displacement mismatchThe broadcast course (COG) differs sharply from the direction the positions actually move — a sign of forged data.
⬜
Box patternMultiple near-90° turns with a closed or tiny path — a classic signature of a computer-generated fake track.
⭕
Circle patternVery low radius variation and near-complete arc — real sailing is rarely this symmetric; often GPS jamming or a synthetic signal.
📑
Registry mismatchThe broadcast name, IMO, or call sign does not match public registries such as ITU — suggesting a borrowed or falsely reported identity.

No single pattern "proves" spoofing, but when several coincide, credibility drops sharply. Full logic is in our methodology.

為什麼與海底電纜和灰色地帶有關？

欺騙之所以是灰色地帶的利器，在於它直接攻擊「歸責」這件事。如果一艘船能讓監測者相信它在別處，它就能在海底電纜附近活動，卻不被即時關聯到。

把欺騙、走暗與身分變更疊在一起，就構成一套完整的隱匿手法：先讓真實行蹤模糊（欺騙／走暗），再讓事後追查困難（換名、換 MMSI）。這正是本站把這些型態都納入威脅評分的原因——任何單項都不決定性，但組合起來會大幅削弱可否認性。

Why It Matters for Cables and the Gray Zone

Spoofing is a gray-zone weapon because it attacks attribution itself. If a ship can make monitors believe it is elsewhere, it can operate near a submarine cable without being connected to the event in real time.

Stack spoofing, going dark, and identity changes together and you get a full concealment toolkit: first blur the real movements (spoof/dark), then make after-the-fact tracing hard (rename, change MMSI). That is why this site folds all of these patterns into the threat score — no single one is decisive, but together they sharply erode deniability.

本站如何判讀？

  1. 對每艘船的航跡檢查上述型態（不可能速度、方框、圓形、航向不符）。
  2. 把廣播身分與 ITU MARS 等登記資料比對，找出船名／IMO／呼號不符。
  3. 偵測到的欺騙型態屬於「高威脅指標」，會直接加進威脅分數。
  4. 欺騙 + 海纜鄰近的組合會再加分，因為這最符合蓄意隱匿的情境。
  5. 分數達門檻者列入可疑清單，供人工進一步研判。

How This Site Reads It

  1. Check each vessel's track for the patterns above (impossible speed, box, circle, course mismatch).
  2. Compare the broadcast identity against registries such as ITU MARS to find name/IMO/call-sign mismatches.
  3. Detected spoofing patterns are "high-threat indicators" added directly to the score.
  4. Spoofing combined with cable proximity adds further weight — the scenario that best fits deliberate concealment.
  5. Vessels reaching the threshold are listed as suspicious for human assessment.

資料限制與免責聲明

  • 並非所有異常都是蓄意欺騙——GPS 干擾、設備故障或資料錯誤都可能造成類似型態。
  • SAR 衛星可作為獨立佐證，但其覆蓋有時間與空間間隙。
  • 登記資料本身也可能過時或缺漏，比對結果需謹慎解讀。
  • 偵測到欺騙型態是強烈警訊與待查線索，並非法律認定，也不指控任何具名船隻違法。

本頁為研究與教育用途，採 MIT 授權彙整公開資料。

Data Limitations & Disclaimer

  • Not every anomaly is deliberate spoofing — GPS jamming, equipment faults, or data errors can produce similar patterns.
  • SAR satellites can corroborate independently, but their coverage has spatial and temporal gaps.
  • Registry data itself can be stale or incomplete, so matches need careful interpretation.
  • A detected spoofing pattern is a strong red flag and a lead to investigate — not a legal finding, and not an accusation against any named vessel.

This page is for research and education, aggregating public data under the MIT License.

常見問題 FAQ

AIS 欺騙和 AIS 關閉有什麼不同？
關閉 AIS（走暗）是讓船從 AIS 上消失；AIS 欺騙是繼續廣播，但內容是假的——假位置、假速度，甚至冒用其他船的身分。走暗留下一段空白，欺騙則主動製造誤導。
AIS 可以偽造哪些資訊？
幾乎全部：GPS 位置座標、對地速度（SOG）、航向（COG）、MMSI、船名、呼號與 IMO 編號。因為 AIS 是船舶自行填寫並廣播，沒有第三方即時驗證。
要怎麼偵測 AIS 欺騙？
靠物理與資料的內在矛盾：不可能的速度、廣播航向與實際位移方向不符、人造的方框或圓形軌跡，以及船名／IMO 與 ITU 等登記資料不符。本站的評分引擎特別偵測這些型態。
AIS 欺騙和海底電纜有什麼關係？
若一艘船能讓自己「看起來」在別處，就能在電纜附近活動而不被即時關聯。配合走暗與身分變更，欺騙讓灰色地帶行為更難被歸責。

FAQ

How is AIS spoofing different from going dark?
Going dark removes the ship from AIS; spoofing keeps broadcasting but with fake content — false position, speed, or even another ship's identity. Going dark leaves a gap; spoofing actively misleads.
What information can be faked?
Almost all of it: GPS position, speed over ground (SOG), course (COG), MMSI, vessel name, call sign, and IMO number — because AIS is self-reported and broadcast with no real-time third-party verification.
How do you detect AIS spoofing?
Through internal contradictions in the physics and data: impossible speed, a broadcast course that doesn't match the actual displacement, synthetic box or circle tracks, and name/IMO mismatches against registries like ITU. This site's scoring engine specifically detects these.
What does AIS spoofing have to do with submarine cables?
If a ship can appear to be elsewhere, it can operate near a cable without being connected to the event in real time. Combined with going dark and identity changes, spoofing makes gray-zone behavior harder to attribute.
下一篇：暗船是什麼 → Next: What is a dark vessel? → ← 返回深度文章 ← Back to articles

參考資料 Sources

本頁概念可對照以下公開、權威來源核實：

本頁為研究與教育用途；偵測訊號為待查線索，非法律或事實認定。詳見 方法論。

Sources

The concepts on this page can be verified against these public, authoritative sources:

This page is for research and education; detection signals are leads to investigate, not legal or factual findings. See the methodology.

相關灰色地帶主題

Related gray-zone topics