Go Back  PPRuNe Forums > Flight Deck Forums > Tech Log
Reload this Page >

GPS spoofing at sea

Tech Log The very best in practical technical discussion on the web

GPS spoofing at sea

Old 15th Aug 2017, 10:29
  #1 (permalink)  
Thread Starter
 
Join Date: Aug 2013
Location: PA
Age: 59
Posts: 30
Likes: 0
Received 0 Likes on 0 Posts
GPS spoofing at sea

An apparent mass and blatant, GPS spoofing attack involving over 20 vessels in the Black Sea last month has navigation experts and maritime executives scratching their heads.

The event first came to public notice via a relatively innocuous safety alert from the U.S. Maritime Administration:

A maritime incident has been reported in the Black Sea in the vicinity of position 44-15.7N, 037-32.9E on June 22, 2017 at 0710 GMT. This incident has not been confirmed. The nature of the incident is reported as GPS interference. Exercise caution when transiting this area.

But the backstory is way more interesting and disturbing. On June 22 a vessel reported to the U.S. Coast Guard Navigation Center:

GPS equipment unable to obtain GPS signal intermittently since nearing coast of Novorossiysk, Russia. Now displays HDOP 0.8 accuracy within 100m, but given location is actually 25 nautical miles off; GPS display…


For few days, on 20 ships, GPS gave a position inland (near Gelendyhik aiport) but vessel was actually drifting more than 25 NM from it.


Mass GPS Spoofing Attack in Black Sea?
underfire is offline  
Old 15th Aug 2017, 10:57
  #2 (permalink)  
 
Join Date: Aug 2007
Location: Devon
Age: 65
Posts: 9
Likes: 0
Received 0 Likes on 0 Posts
Could it really be spoofing

Before I get started, my background is ex-FAA aircraft Dispatcher and ramp rat, now a physicist employed as a GPS Security Technologist working for a major GPS simulation/test company.

I've been monitoring the reports from the Black Sea - there were reports from Moscow and St Petersburg in late 2016 of possible GPS spoofing taking place - in Moscow, users near the Kremlin reported that their GPS receivers were indicating that they were at Vnukovo airport, a significant error.
Here's one of the reports: - Getting lost near the Kremlin? Russia could be 'GPS spoofing' - Dec. 2, 2016

But we do have to treat all of these reports with a little bit of caution - we do know from work that was done in the UK that GPS jamming can cause GPS receivers to output misleading position and timing information - this happens when the interference level is significant enough to affect the operation of the GPS receiver but not enough to saturate the RF front end and stop it working completely. The project in the UK showed this graphically - with some unexpected results...

https://rntfnd.org/wp-content/upload...-GNSS-2013.pdf

So there's a lot to consider here before we could say what is going on with much certainty. Some of the reports (the 22 June report to USCG) is interesting as it does suggest something a bit more than simple jamming might be going on.
ex-Dispatcher is offline  
Old 15th Aug 2017, 12:30
  #3 (permalink)  
 
Join Date: Apr 2010
Location: London
Posts: 7,072
Likes: 0
Received 0 Likes on 0 Posts
Very interesting ex_d & useful.......
Heathrow Harry is offline  
Old 15th Aug 2017, 15:18
  #4 (permalink)  
 
Join Date: Mar 2001
Location: I wouldn't know.
Posts: 4,497
Likes: 0
Received 0 Likes on 0 Posts
There was an official warning for the duration of the G20 summit in hamburg a few weeks back about possible GPS problems in the wider hamburg area, as apparently some of the security personnel of some of those leaders were actively jamming/spoofing GPS.
Denti is offline  
Old 15th Aug 2017, 17:13
  #5 (permalink)  
 
Join Date: Oct 2004
Location: California
Posts: 385
Likes: 0
Received 4 Likes on 4 Posts
A relatively simple hack, given that the spoof was to a fixed position, might be to place a wideband GPS receiver at the fixed position, then relay the signal to the black sea, at a somewhat higher power. The time will be incorrect, but I venture that there are few GPS receivers with a built-in atomic clock that could detect that offset. Nor would they be able to detect the actual signal location (via DF).
MarcK is online now  
Old 15th Aug 2017, 17:41
  #6 (permalink)  
Thread Starter
 
Join Date: Aug 2013
Location: PA
Age: 59
Posts: 30
Likes: 0
Received 0 Likes on 0 Posts
Jamming it and misdirecting it are much different animals.

Very few recievers would, or even could, use one signal to triangulate and locate.

At sea is a slow moving target.

Thank you X-D...

#1 test, a YAGI ant, which is a focused main lobe, that while effective near shore and with tracking, would have to be very powerful to reach an aircraft. (and would still have to track) likely not able to affect widespread issues.

#2 test results, the jammers were 5m and 15m from the GPS antennes?

Surface vessels have INS, so while a temporay disrution would affect the GPS location, the INS would not be affected until the disruption lasted 15 mins or more, and then IRS drift degredation of location would occur.

Last edited by underfire; 15th Aug 2017 at 18:06.
underfire is offline  
Old 15th Aug 2017, 21:14
  #7 (permalink)  
 
Join Date: Dec 2003
Location: Tring, UK
Posts: 1,822
Received 2 Likes on 2 Posts
I had the GPS on the 777 go a-wandering last year when over Russia, was on inertial/radio for about 40mins. Confirmed later as genuine outside interference...
FullWings is offline  
Old 15th Aug 2017, 21:38
  #8 (permalink)  
 
Join Date: Aug 2009
Location: GPS L INVALID
Posts: 578
Likes: 0
Received 0 Likes on 0 Posts
So, time to double check that your radio update inhibit remains off until you're planning to fly a GNSS approach and to confirm your position whenever able with navaids along your route.... what's new?
The complete reliance on a service provided out of benevolence by a nation's military is a little worrying - I would not be surprised in the slightest if selective availability is reintroduced as the North Korean conflict heats up
STBYRUD is offline  
Old 15th Aug 2017, 23:23
  #9 (permalink)  
 
Join Date: Jun 2003
Location: LFMD
Posts: 749
Likes: 0
Received 6 Likes on 3 Posts
There used often to be NOTAMs for the area round China Lake (big US Navy research base in the desert in SoCal*) concerning GPS disruption. I believe they were testing this kind of capability. Haven't seen any for a while, I guess that now aviation depends on GPS it would be kind of embarrassing to send all the LAX arrivals to Hawaii. If the US can do it, I'm sure the Russians can too.

*(Don't ask me why the US Navy has a research centre in the middle of the desert, I have no idea).
n5296s is offline  
Old 16th Aug 2017, 02:33
  #10 (permalink)  
 
Join Date: Sep 2014
Location: Canada
Posts: 1,257
Likes: 0
Received 0 Likes on 0 Posts
There used often to be NOTAMs for the area round China Lake (big US Navy research base in the desert in SoCal*) concerning GPS disruption. I believe they were testing this kind of capability. Haven't seen any for a while, I guess that now aviation depends on GPS it would be kind of embarrassing to send all the LAX arrivals to Hawaii. If the US can do it, I'm sure the Russians can too.
They're constantly testing, at China Lake and throughout the country:

https://www.faasafety.gov/files/noti...t_Advisory.pdf

FLIGHT ADVISORY
GPS INTERFERENCE TESTING
CHLK GPS 17-05
5-31 August, 2017
China Lake, CA

GPS testing is scheduled as follows and may result in unreliable or unavailable GPS signal.

A. Location: Centered at 360759N1173215W or the BTY VOR 210 degree radial at 055 NM.

B. Dates and times:
5 – 6 AUG 17 1630Z – 2359Z
22 – 24 AUG 17 1630Z – 2359Z
29 – 31 AUG 17 1630Z – 2359Z
peekay4 is offline  
Old 16th Aug 2017, 10:19
  #11 (permalink)  
 
Join Date: Jun 2006
Location: Brisbane
Posts: 265
Likes: 0
Received 0 Likes on 0 Posts
What am I missing here folks?

My Boeing is not going to fly 25NM off course if it's GPS suddenly starts reading 25NM off course.

My Boeing is also quite capable of flying to destination without GPS (unless I need it for approach, but I plan contingencies for that).
Derfred is offline  
Old 16th Aug 2017, 11:19
  #12 (permalink)  
 
Join Date: Jan 2012
Location: Below transition level
Posts: 363
Received 2 Likes on 2 Posts
Interesting article on the GPS spoofing which the government in Russia has around the Kremlin.

Puzzling Moscow GPS Anomaly - Articles - Get Russia
Fostex is offline  
Old 16th Aug 2017, 15:38
  #13 (permalink)  
 
Join Date: Oct 2004
Location: California
Posts: 385
Likes: 0
Received 4 Likes on 4 Posts
Originally Posted by Derfred
My Boeing is not going to fly 25NM off course if it's GPS suddenly starts reading 25NM off course.
I think not all aircraft have INS. And under NextGen, having all aircraft report the same position via ADS-B might be worrying.

Last edited by MarcK; 16th Aug 2017 at 15:57. Reason: added ADS-B comment
MarcK is online now  
Old 16th Aug 2017, 15:59
  #14 (permalink)  
 
Join Date: Jan 2012
Location: Below transition level
Posts: 363
Received 2 Likes on 2 Posts
Nearly ever GPS chipset on the market will use some sort of Kalman/State space filtering. At it's most basic level this means that the GPS will know (via a mathematical model) what it expects it's next location value to be based on current velocity vector, if the calculated value (based on radio signals) is different then an error 'weighting' (Kalman gain) is applied to that calculated value to indicate that it might be erroneus and it is not used in the mathematical model of the current location.

In short, if your aircraft GPS detects a sudden step change in location data your GPS system /should/ detect that it is erroneus. If the change is small and progressive, that is more difficult to handle.
Fostex is offline  
Old 16th Aug 2017, 17:53
  #15 (permalink)  
Thread Starter
 
Join Date: Aug 2013
Location: PA
Age: 59
Posts: 30
Likes: 0
Received 0 Likes on 0 Posts
Yes, this has been discussed at length on other threads. On the ac, the GPS knows where it was, not where it is. The Kalman filter provides the estimated location.
Along with RAIM, and RAIM checks in the avionics, this will leave out erroneous signals.
If nothing else, on a complete jam, it will go to the IRS until it acquires enough GPS data to continue.
underfire is offline  
Old 16th Aug 2017, 18:58
  #16 (permalink)  
 
Join Date: Jun 2003
Location: LFMD
Posts: 749
Likes: 0
Received 6 Likes on 3 Posts
it will go to the IRS
That's a new one to me. I've never heard of an IRS approach. Do you get a penalty if you go below minimums? Can it be audited?
n5296s is offline  
Old 16th Aug 2017, 19:49
  #17 (permalink)  
 
Join Date: Feb 2015
Location: North Up
Posts: 489
Likes: 0
Received 0 Likes on 0 Posts
At the IAF it says "I'm from the government and I'm here to help you".
Cazalet33 is offline  
Old 16th Aug 2017, 22:33
  #18 (permalink)  
Thread Starter
 
Join Date: Aug 2013
Location: PA
Age: 59
Posts: 30
Likes: 0
Received 0 Likes on 0 Posts
That's a new one to me. I've never heard of an IRS approach. Do you get a penalty if you go below minimums? Can it be audited?
Not sure what you mean. Technically, it is always an INS/IRS approach, one cannot use raw GPS data.
Depending on the RNP level of the approach, you may not be able to use the approach in the degraded mode.

The system will tell you the RAIM and availablity. Depending on the system you have different capabilities.

To answer your question, yes, with IRS drift and other issues, you will get penalties, ie reduced RNP levels or GPS N/A.

You will not get a varied minima depending on GPS avail, it is a A or NA...
underfire is offline  
Old 17th Aug 2017, 03:19
  #19 (permalink)  
 
Join Date: Aug 2007
Location: england
Posts: 851
Received 2 Likes on 2 Posts
I'm guessing the smart GPS jamming techniques will be using similar techniques to range gate stealing and operating within receiver's failure tolerances?
hunterboy is offline  
Old 17th Aug 2017, 10:15
  #20 (permalink)  
 
Join Date: Jan 2011
Location: on the cusp
Age: 52
Posts: 217
Likes: 0
Received 0 Likes on 0 Posts
I suspect that neither RAIM nor a KF would prevent spoofing, in fact a KF would perhaps help the spoofer.

Techniques such as those employed to carry out a range pull off are relevant but I think there is a lot more involved than would be in spoofing a radar.

An aircraft's greatest defence is the fact that it is flying.
dClbydalpha is offline  

Thread Tools
Search this Thread

Contact Us - Archive - Advertising - Cookie Policy - Privacy Statement - Terms of Service

Copyright © 2024 MH Sub I, LLC dba Internet Brands. All rights reserved. Use of this site indicates your consent to the Terms of Use.