A Survey and Analysis of the GNSS Spoofing Threat and Countermeasures

Detection and prevention of global navigation satellite system (GNSS) “spoofing” attacks, or the broadcast of false global navigation satellite system services, has recently attracted much research interest. This survey aims to fill three gaps in the literature: first, to assess in detail the exact nature of threat scenarios posed by spoofing against the most commonly cited targets; second, to investigate the many practical impediments, often underplayed, to carrying out GNSS spoofing attacks in the field; and third, to survey and assess the effectiveness of a wide range of proposed defences against GNSS spoofing. Our conclusion lists promising areas of future research.

[1]  Beatrice Motella,et al.  Detection of spoofed GPS signals at code and carrier tracking level , 2010, 2010 5th ESA Workshop on Satellite Navigation Technologies and European Workshop on GNSS Signals and Signal Processing (NAVITEC).

[2]  Qian Chen,et al.  Chinese Translation of Allen J. Wood, Bruce F. Wollenberg, Gerald B. Sheblé’s Book "Power Generation, Operation and Control (3rd Edition) , 2017 .

[3]  Alejandro D. Dominguez-Garcia,et al.  Spoofing GPS Receiver Clock Offset of Phasor Measurement Units , 2013, IEEE Transactions on Power Systems.

[4]  Andrew N. Novick,et al.  Time and Frequency Measurements Using the Global Positioning System , 2001 .

[5]  Arthur K. Kuhn,et al.  The International Convention for Safety of Life at Sea , 1930, American Journal of International Law.

[6]  Peter Teunissen,et al.  Ambiguity resolution performance with GPS and BeiDou for LEO formation flying , 2014 .

[7]  Abdelsalam Elhaffar,et al.  Power transmission line fault location based on current traveling waves , 2008 .

[8]  Ali Jafarnia Jahromi,et al.  GNSS Signal Authenticity Verification in the Presence of Structural Interference , 2013 .

[9]  Oscar Isoz,et al.  Assessment of GPS L1/Galileo E1 interference monitoring system for the airport environment , 2011 .

[10]  Gérard Lachapelle,et al.  SPOOFING COUNTERMEASURE FOR GNSS RECEIVERS - A REVIEW OF CURRENT AND FUTURE RESEARCH TRENDS 4 th International Colloquium on Scientific and Fundamental Aspects of the Galileo Programme European Space Agency, Prague, 4-6 December 2013 , 2013 .

[11]  Christoph Günther,et al.  A Survey of Spoofing and Counter-Measures , 2014 .

[12]  D. Work,et al.  Cooperative GNSS Authentication Reliability from Unreliable Peers , 2022 .

[13]  Todd E. Humphreys,et al.  Detection Strategy for Cryptographic GNSS Anti-Spoofing , 2013, IEEE Transactions on Aerospace and Electronic Systems.

[14]  David Brumley,et al.  GPS software attacks , 2012, CCS.

[15]  Wenyuan Xu,et al.  Detection of On-Road Vehicles Emanating GPS Interference , 2014, CCS.

[16]  Oscar Isoz,et al.  Detecting false signals with automatic gain control , 2012 .

[17]  J. S. Warner,et al.  GPS Spoofing Countermeasures , 2003 .

[18]  G.W. Hein,et al.  MBOC: The New Optimized Spreading Modulation Recommended for GALILEO L1 OS and GPS L1C , 2006, 2006 IEEE/ION Position, Location, And Navigation Symposium.

[19]  J. A. Volpe.  Vulnerability Assessment of the Transportation Infrastructure Relying on the Global Positioning Syst , 2001 .

[20]  Mark L. Psiaki,et al.  GNSS Multipath Mitigation using Antenna Motion , 2015 .

[21]  L. Scott,et al.  Anti-Spoofing & Authenticated Signal Architectures for Civil Navigation Systems , 2003 .

[22]  Edward A. Lee,et al.  Model-based evaluation of GPS spoofing attacks on power grid sensors , 2013, 2013 Workshop on Modeling and Simulation of Cyber-Physical Energy Systems (MSCPES).

[23]  Per Enge,et al.  Efficient Authentication Mechanisms for Navigation Systems - a Radio-Navigation Case Study , 2009 .

[24]  Bradley Churcher.  Differential global positioning system , 2011 .

[25]  D. May,et al.  The ‘pains’ of electronic monitoring: a slap on the wrist or just as bad as prison? , 2014 .

[26]  Srdjan Capkun,et al.  Short paper: detection of GPS spoofing attacks in power grids , 2014, WiSec '14.

[27]  Michel Ouellette,et al.  Synchronous Ethernet and IEEE 1588 in Telecoms: Next Generation Synchronization Networks , 2013 .

[28]  共立出版株式会社.  コンピュータ・サイエンス : ACM computing surveys , 1978 .

[29]  Jeannette M. Wing,et al.  An Attack Surface Metric , 2011, IEEE Transactions on Software Engineering.

[30]  Todd E. Humphreys,et al.  GPS Spoofing Detection via Dual-Receiver Correlation of Military Signals , 2013, IEEE Transactions on Aerospace and Electronic Systems.

[31]  H. Koshima,et al.  Personal locator services emerge , 2000 .

[32]  Xiancheng Ding,et al.  Development of BeiDou Navigation Satellite System , 2011 .

[33]  Andrew N. Novick,et al.  Time and Frequency Measurements Using the Global Positioning System (GPS) , 2001 .

[34]  Per K. Enge,et al.  Authenticating aviation augmentation system broadcasts , 2010, IEEE/ION Position, Location and Navigation Symposium.

[35]  John W. Betz,et al.  Binary Offset Carrier Modulations for Radionavigation , 2001 .

[36]  Srdjan Capkun,et al.  On the requirements for successful GPS spoofing attacks , 2011, CCS '11.

[37]  Saeed Daneshmand,et al.  GNSS Interference Mitigation Using Antenna Array Processing , 2013 .

[38]  William H. Sanders,et al.  Reliable GPS-based timing for power systems: A multi-layered multi-receiver architecture , 2014, 2014 Power and Energy Conference at Illinois (PECI).

[39]  Peter H. Dana.  Global Positioning System (GPS) Time Dissemination for Real-Time Applications , 1997, Real-Time Systems.

[40]  T. Humphreys,et al.  Assessing the Spoofing Threat: Development of a Portable GPS Civilian Spoofer , 2008 .

[41]  Markus G. Kuhn,et al.  An Asymmetric Security Mechanism for Navigation Signals , 2004, Information Hiding.

[42]  Lijun Qian,et al.  Quickest detection of GPS spoofing attack , 2012, MILCOM 2012 - 2012 IEEE Military Communications Conference.

[43]  Katina Michael,et al.  The Emerging Ethics of Humancentric GPS Tracking and Monitoring , 2006, 2006 International Conference on Mobile Business.

[44]  Xiaoli Ding,et al.  Potential Benefits of GPS/GLONASS/GALILEO Integration in an Urban Canyon – Hong Kong , 2010, Journal of Navigation.

[45]  S. Adadurov.  Research & Design Institute for Information Technology, Signalling and Telecommunications on Railway Transport , 2010 .

[46]  Gérard Lachapelle,et al.  GPS Vulnerability to Spoofing Threats and a Review of Antispoofing Techniques , 2012 .

[47]  M. Paolone,et al.  Development of an RTU for synchrophasors estimation in active distribution networks , 2009, 2009 IEEE Bucharest PowerTech.

[48]  Todd E. Humphreys,et al.  GNSS Receiver Implementation on a DSP: Status, Challenges, and Prospects , 2006 .

[49]  Jinping Chen.  Analysis of the GNSS Augmentation Technology Architecture , 2011 .

[50]  Peter F. Swaszek,et al.  GNSS Spoof Detection Using Shipboard IMU Measurements , 2014 .

[51]  Todd E. Humphreys,et al.  Receiver-Autonomous Spoofing Detection: Experimental Results of a Multi-Antenna Receiver Defense against a Portable Civil GPS Spoofer , 2009 .

[52]  Jeremie Godet,et al.  Status of Galileo Frequency and Signal Design , 2002 .

[53]  Brent M. Ledvina,et al.  An In-Line Anti-Spoofing Device for Legacy Civil GPS Receivers , 2010 .

[54]  V. Skendzic,et al.  Standard profile for use of IEEE std 1588-2008 precision time protocol (PTP) in power system applications , 2013, 2013 66th Annual Conference for Protective Relay Engineers.

[55]  D. Finney,et al.  Consequences of Out-of-Phase Reclosing on Feeders With Distributed Generators , 2011 .

[56]  Panagiotis Papadimitratos,et al.  GNSS-based Positioning: Attacks and countermeasures , 2008, MILCOM 2008 - 2008 IEEE Military Communications Conference.

[57]  Todd E. Humphreys,et al.  Characterization of Receiver Response to Spoofing Attacks , 2011 .

[58]  Dawn Song,et al.  The TESLA Broadcast Authentication Protocol , 2002 .

[59]  Oscar Pozzobon,et al.  Secure Tracking using Trusted GNSS Receivers and Galileo Authentication Services , 2004 .

[60]  Michael J. Rycroft,et al.  Understanding GPS. Principles and Applications , 1997 .

[61]  B.R. Rao,et al.  Radiation Pattern Analysis of Aircraft Mounted GPS Antennas and Verification Through Scale Model Testing , 2006, 2006 IEEE/ION Position, Location, And Navigation Symposium.

[62]  Michael Russell,et al.  Myth Busted: Civilian GPS Receivers Actually do have Access to the L2 Frequency , 2010 .

[63]  Jorge Olenewa.  Guide to Wireless Communications , 2013 .

[64]  Lawrence J. Zanetti.  Review of North American Electric Reliability Corporation (NERC) Interim Report: Effects of Geomagnetic Disturbances on the Bulk Power System—February 2012 , 2013 .

[65]  J. S. Warner,et al.  A Simple Demonstration that the Global Positioning System ( GPS ) is Vulnerable to Spoofing , 2012 .

[66]  O. Pozzobon,et al.  Signal authentication and integrity schemes for next generation global navigation satellite systems , 2005 .

[67]  Gérard Lachapelle,et al.  GNSS Spoofing Detection for Single Antenna Handheld Receivers , 2011 .

[68]  G. Brunello,et al.  An overview of the IEEE Standard C37.118.2 — Synchrophasor Data Transfer for Power Systems , 2014 .

[69]  R. Katulski,et al.  Detection and Mitigation of GPS Spoofing Based on Antenna Array Processing , 2015 .

[70]  Gérard Lachapelle,et al.  A GNSS structural interference mitigation technique using antenna array processing , 2014, 2014 IEEE 8th Sensor Array and Multichannel Signal Processing Workshop (SAM).

[71]  Todd E. Humphreys,et al.  Unmanned Aircraft Capture and Control Via GPS Spoofing , 2014, J. Field Robotics.

[72]  James Carroll,et al.  Global Positioning System Timing Criticality Assessment – Preliminary Performance Results , 2008 .

[73]  P. Papadimitratos,et al.  Protection and fundamental vulnerability of GNSS , 2008, 2008 IEEE International Workshop on Satellite and Space Communications.

[74]  Mark L. Psiaki,et al.  GNSS Spoofing Detection Correlating Carrier Phase with Rapid Antenna Motion , 2022 .

[75]  Todd E. Humphreys,et al.  Practical cryptographic civil GPS signal authentication , 2011 .

[76]  Todd E. Humphreys,et al.  Real‐Time GPS Spoofing Detection via Correlation of Encrypted Signals , 2013 .

[77]  Luigi Coppolino,et al.  A GPS Spoofing Resilient WAMS for Smart Grid , 2013, EWDC.

[78]  Rebecca Bendick.  Geodesy: The Challenge of the Third Millennium , 2003 .

[79]  Dennis M. Akos,et al.  Who's Afraid of the Spoofer? GPS/GNSS Spoofing Detection via Automatic Gain Control (AGC) , 2012 .

[80]  Todd E. Humphreys,et al.  Evaluation of the vulnerability of phasor measurement units to GPS spoofing attacks , 2012, Int. J. Crit. Infrastructure Prot..

[81]  Peter F. Swaszek,et al.  Analysis of a Simple, Multi-Receiver GPS Spoof Detector , 2013 .

[82]  B. Motella,et al.  Performance assessment of low cost GPS receivers under civilian spoofing attacks , 2010, 2010 5th ESA Workshop on Satellite Navigation Technologies and European Workshop on GNSS Signals and Signal Processing (NAVITEC).

[83]  Logan Scott.  Making the GNSS Environment Hostile to Jammers & Spoofers , 2011 .

[84]  C. Wheatley.  SELF-SYNCHRONIZING A CDMA CELLULAR NETWORK , 1999 .

[85]  Alfred Kleusberg,et al.  Analytical GPS Navigation Solution , 2003 .

[86]  Steven P. Powell,et al.  Kalman-Filter-Based Semi-Codeless Tracking of Weak Dual-Frequency GPS Signals , 2003 .

[87]  GROUNDING OF THE PANAMANIAN PASSENGER SHIP ROYAL MAJESTY ON ROSE AND CROWN SHOAL NEAR NANTUCKET , MASSACHUSETTS JUNE 10 , 1995 MARINE ACCIDENT REPORT , 1998 .

[88]  M. J. Thompson,et al.  Fundamentals and advancements in generator synchronizing systems , 2012, 2012 65th Annual Conference for Protective Relay Engineers.

[89]  Todd E. Humphreys,et al.  An Evaluation of the Vestigial Signal Defense for Civil GPS Anti-Spoofing , 2011 .