Hardening GPS/GNSS receivers against spoofing and jamming is crucial as threats are new, real and increasing. Testing with a GPS/GNSS simulator is a very effective tool for designing and evaluating countermeasures for mission-critical applications for positioning, navigation and timing.
2. │5/3/2019GNSS Simulation Application: Spoofing Testing
Bringing Technology to:
• Military, Aerospace
• UAV’s
• Electronic Warfare
• C4ISR
• High-End Commercial Apps
• Datacenters
• Robotics/Telematics
• IDM
• GIS Data Mining
OROLIA SIMPLIFIES THE INTEGRATION OF POSITION, NAVIGATION,
AND TIMING INTO OUR CUSTOMERS’ SYSTEMS.
3. │5/3/2019GNSS Simulation Application: Spoofing Testing
• An attempt to deceive a GPS receiver by broadcasting
false GPS signals that the receiver will use instead of the
live sky signals
• Two Testing Applications:
• Hardening Receivers – understand how a receiver reacts in a spoofing
situation and test the effectiveness of mitigation techniques or counter
measures
• Defensive Disruption – understand how spoofing can be used to actively
take control of a UAS and deflect or re-direct its flight path
• Different than Jamming
• Spoofing is hard. Jamming is easy.
• Jamming can disrupt a receiver but not re-locate or trick it
WHAT IS GPS SPOOFING?
4. │5/3/2019GNSS Simulation Application: Spoofing Testing
1. TIME SYNC Signal
(Live Sky Time vs. Spoofer Time)
2. POSITION Accuracy
(Actual Receiver Position vs. Spoofer
Starting Position)
3. POWER Level
(Live Sky Received Power vs. Spoofer
Transmitter Power)
CRITICAL PARAMETERS FOR SPOOFING
5. │5/3/2019GNSS Simulation Application: Spoofing Testing
CRITICAL PARAMETERS – TIME SYNC
• The spoofing signal must be synchronized with the
live sky signal to capture a receiver already tracking
the real signal
• SYNC required depends on the receiver’s tracking
algorithms
• Test: Quantify the sensitivity of the receiver to the
variation in TIME SYNC between live sky and spoofer
• Or in other words, how close does the spoofer time
need to be to the live sky time (at the receiver’s
antenna)?
6. │5/3/2019GNSS Simulation Application: Spoofing Testing
CRITICAL PARAMETERS - POSITION
• Test: Quantify the sensitivity of the receiver to
the variation of the POSITION between the
calculated live sky position and the transmitted
spoofer position
• In other words, how close does the spoofer
position need to be?
• Again, depends on the receiver’s tracking
algorithms
Live Simulator
Position
Spoofer
Simulator
Start Position
500m position offset
7. │5/3/2019GNSS Simulation Application: Spoofing Testing
CRITICAL PARAMETERS – POWER LEVEL
• Quantify the sensitivity of the receiver to the
difference in power between live sky and the
spoofer
• In other words, how much more power does
the spoofer need in order to take over the
receiver?
• Note that too strong of a signal can jam the
receiver!
8. │5/3/2019GNSS Simulation Application: Spoofing Testing
SPOOFING TESTING CONFIGURATIONS
1. 1x GSG™ Simulator for “Sky”
2. 1x GSG™ Simulator for Spoofer
3. 1x SecureSync ™ for sync
Full control over:
• Time sync
• Power Level
• Both positions
1. Live Sky Antenna
2. 1x GSG™ Simulator for Spoofer
3. 1x SecureSync ™ for sync
Gets very complicated quickly
• Hard to determine power levels
• Difficult to track moving vehicle
Simulate both Live Sky and Spoofer Live Sky plus Simulated SpooferA B
Configuration A is preferred
10. │5/3/2019GNSS Simulation Application: Spoofing Testing
CONCLUSIONS
• Hardening GNSS receivers against
spoofing and jamming is crucial
• The threat is new, real and increasing
• Testing with a simulator is a very
effective tool for designing and
evaluating countermeasures
"The bad guys on the
borders have lots of
money, and what
they're putting money
into is in spoofing and
jamming of GPS…”
Timothy Bennett, Program
Mgr, US Dept of Homeland
Security Science and
Technology Directorate