论文标题
基于部分相关性和身份验证数据的不可预测性检测对GNSS的重播攻击
Detection of Replay Attacks to GNSS based on Partial Correlations and Authentication Data Unpredictability
论文作者
论文摘要
目前,有意干扰,尤其是GNSS欺骗,目前是定位,导航和时机(PNT)社区中最重要的关注点之一。随着伽利略的开放服务导航消息身份验证(OSNMA)的采用,E1B信号组件将不断广播不可预测的加密数据。这允许GNSS接收器不仅确保数据来源的真实性,还可以检测到已经跟踪具有相对良好可见性条件的真实信号的接收器的重播欺骗攻击。由于Spoofer需要估算OSNMA引入的不可预测的位,几乎为零延迟,以执行安全代码估计和重播(SCER)攻击,因此不可避免地将Spoofer引入了略微失真,这可能是欺骗检测器的基础。在这项工作中,我们根据信号的可预测和不可预测的部分获得的GNSS信号的部分相关性提出了五个检测器。我们在广泛的测试案例中评估它们,包括不同类型的接收器和欺骗条件。结果表明,其中一个探测器始终优于其他检测器,即使在Spoofer的有利条件下,它也能够以高概率检测SCER攻击。最后,我们讨论了在接收器中实现拟议检测器的一些实际考虑因素,特别是当使用伽利略osnma消息结构时。
Intentional interference, and in particular GNSS spoofing, is currently one of the most significant concerns of the Positioning, Navigation and Timing (PNT) community. With the adoption of Open Service Navigation Message Authentication (OSNMA) in Galileo, the E1B signal component will continuously broadcast unpredictable cryptographic data. This allows GNSS receivers not only to ensure the authenticity of data origin but also to detect replay spoofing attacks for receivers already tracking real signals with relatively good visibility conditions. Since the spoofer needs to estimate the unpredictable bits introduced by OSNMA with almost zero delay in order to perform a Security Code Estimation and Replay (SCER) attack, the spoofer unavoidably introduces a slight distortion into the signal, which can be the basis of a spoofing detector. In this work, we propose five detectors based on partial correlations of GNSS signals obtained over predictable and unpredictable parts of the signals. We evaluate them in a wide set of test cases, including different types of receiver and spoofing conditions. The results show that one of the detectors is consistently superior to the others, and it is able to detect SCER attacks with a high probability even in favorable conditions for the spoofer. Finally, we discuss some practical considerations for implementing the proposed detector in receivers, in particular when the Galileo OSNMA message structure is used.