Extending RAIM with a Gaussian Mixture of Opportunistic Information (2402.03449v1)
Abstract: GNSS are indispensable for various applications, but they are vulnerable to spoofing attacks. The original receiver autonomous integrity monitoring (RAIM) was not designed for securing GNSS. In this context, RAIM was extended with wireless signals, termed signals of opportunity (SOPs), or onboard sensors, typically assumed benign. However, attackers might also manipulate wireless networks, raising the need for a solution that considers untrustworthy SOPs. To address this, we extend RAIM by incorporating all opportunistic information, i.e., measurements from terrestrial infrastructures and onboard sensors, culminating in one function for robust GNSS spoofing detection. The objective is to assess the likelihood of GNSS spoofing by analyzing locations derived from extended RAIM solutions, which include location solutions from GNSS pseudorange subsets and wireless signal subsets of untrusted networks. Our method comprises two pivotal components: subset generation and location fusion. Subsets of ranging information are created and processed through positioning algorithms, producing temporary locations. Onboard sensors provide speed, acceleration, and attitude data, aiding in location filtering based on motion constraints. The filtered locations, modeled with uncertainty, are fused into a composite likelihood function normalized for GNSS spoofing detection. Theoretical assessments of GNSS-only and multi-infrastructure scenarios under uncoordinated and coordinated attacks are conducted. The detection of these attacks is feasible when the number of benign subsets exceeds a specific threshold. A real-world dataset from the Kista area is used for experimental validation. Comparative analysis against baseline methods shows a significant improvement in detection accuracy achieved by our Gaussian Mixture RAIM approach. Moreover, we discuss leveraging RAIM results for plausible location recovery.
- \APACrefYearMonthDay2017\APACmonth09. \BBOQ\APACrefatitleChips-message robust authentication (Chimera) for GPS civilian signals Chips-message robust authentication (chimera) for GPS civilian signals.\BBCQ \BIn \BemProc. 30th ION GNSS+. \APACaddressPublisherPortland, OR, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2015. \BBOQ\APACrefatitleBaseline advanced RAIM user algorithm and possible improvements Baseline advanced RAIM user algorithm and possible improvements.\BBCQ \APACjournalVolNumPagesIEEE Trans. Aerosp. Electron. Syst.511713–732. \PrintBackRefs\CurrentBib
- \APACinsertmetastarBobArkUht:J23{APACrefauthors}Bobzilla, Arkasha\BCBL \BBA Uhtu. \APACrefYearMonthDay2023. \BBOQ\APACrefatitleWIGLE.NET. All the networks. Found by Everyone. Wigle.net. all the networks. found by everyone.\BBCQ \APACjournalVolNumPagesWiGLE. {APACrefURL} [2023-09-15]https://wigle.net/ \PrintBackRefs\CurrentBib
- \APACinsertmetastarBro:J92{APACrefauthors}Brown, R\BPBIG. \APACrefYearMonthDay1992. \BBOQ\APACrefatitleA baseline GPS RAIM scheme and a note on the equivalence of three RAIM methods A baseline GPS RAIM scheme and a note on the equivalence of three RAIM methods.\BBCQ \APACjournalVolNumPagesJ. Inst. Navigation393301–316. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2020\APACmonth09. \BBOQ\APACrefatitleAndroid raw GNSS measurement datasets for precise positioning Android raw GNSS measurement datasets for precise positioning.\BBCQ \BIn \BemProc. 33rd ION GNSS+. \APACaddressPublishervirtual event. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022. \BBOQ\APACrefatitleA Slowly Varying Spoofing Algorithm Avoiding Tightly-Coupled GNSS/IMU With Multiple Anti-Spoofing Techniques A slowly varying spoofing algorithm avoiding tightly-coupled GNSS/IMU with multiple anti-spoofing techniques.\BBCQ \APACjournalVolNumPagesIEEE Trans. Veh. Technol.7188864–8876. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2023. \BBOQ\APACrefatitleTwo Time Spoofing Algorithms on GNSS Receiver Instrumentation of Modifying Satellite Clock Correction Parameters in Navigation Message Two time spoofing algorithms on GNSS receiver instrumentation of modifying satellite clock correction parameters in navigation message.\BBCQ \APACjournalVolNumPagesIEEE Trans. Instrum. Meas.721–11. \PrintBackRefs\CurrentBib
- \APACinsertmetastarGmv:J21b{APACrefauthors}GMV. \APACrefYearMonthDay2023\BCnt1. \BBOQ\APACrefatitleGalileo Open Service Navigation Message Authentication Galileo open service navigation message authentication.\BBCQ \APACjournalVolNumPagesNavipedia. {APACrefURL} [2023-03-03]https://gssc.esa.int/navipedia/index.php/Galileo-Open-Service-Navigation-Message-Authentication \PrintBackRefs\CurrentBib
- \APACinsertmetastarGmv:J21a{APACrefauthors}GMV. \APACrefYearMonthDay2023\BCnt2. \BBOQ\APACrefatitleGNSS Authentication and encryption GNSS authentication and encryption.\BBCQ \APACjournalVolNumPagesNavipedia. {APACrefURL} [2023-03-03]https://gssc.esa.int/navipedia/index.php/GNSS-Authentication-and-encryption \PrintBackRefs\CurrentBib
- \APACinsertmetastarGoo:J22{APACrefauthors}Goodin, D. \APACrefYearMonthDay2022. \BBOQ\APACrefatitleGPS interference caused the FAA to reroute Texas air traffic. Experts stumped GPS interference caused the FAA to reroute Texas air traffic. experts stumped.\BBCQ \APACjournalVolNumPagesArs Technica. {APACrefURL} [2022-10-20]https://arstechnica.com/information-technology/2022/10/cause-is-unknown... \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2008\APACmonth09. \BBOQ\APACrefatitleAssessing the spoofing threat: Development of a portable GPS civilian spoofer Assessing the spoofing threat: Development of a portable GPS civilian spoofer.\BBCQ \BIn \BemProc. 21st ION GNSS+. \APACaddressPublisherSavannah, GA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2014. \BBOQ\APACrefatitleSolution separation versus residual-based RAIM Solution separation versus residual-based RAIM.\BBCQ \APACjournalVolNumPagesJ. Inst. Navigation614273–291. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022. \BBOQ\APACrefatitleI Am Not Afraid of the GPS Jammer: Resilient Navigation Via Signals of Opportunity in GPS-Denied Environments I am not afraid of the GPS jammer: Resilient navigation via signals of opportunity in GPS-denied environments.\BBCQ \APACjournalVolNumPagesIEEE Aerosp. Electron. Syst. Mag.3774-19. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2014\APACmonth05. \BBOQ\APACrefatitleGPS spoofing detection using RAIM with INS coupling GPS spoofing detection using RAIM with INS coupling.\BBCQ \BIn \BemProc. IEEE/ION PLANS. \APACaddressPublisherMonterey, CA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022\APACmonth01. \BBOQ\APACrefatitleDistributed and Mobile Message Level Relaying/Replaying of GNSS Signals Distributed and mobile message level relaying/replaying of GNSS signals.\BBCQ \BIn \BemProc. ION ITM (\BPGS 56–67). \APACaddressPublisherLong Beach, CA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2021\APACmonth08. \BBOQ\APACrefatitleStars Can Tell: A Robust Method to Defend against GPS Spoofing Attacks using Off-the-shelf Chipset Stars can tell: A robust method to defend against GPS spoofing attacks using off-the-shelf chipset.\BBCQ \BIn \BemProc. 30th USENIX Security. \APACaddressPublishervirtual event. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2021. \BBOQ\APACrefatitleUAV-aided Radio Map Construction for Wireless Communications and Localization UAV-aided radio map construction for wireless communications and localization.\BBCQ \APACjournalVolNumPagesarXiv preprint arXiv:2107.10574v1. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2023\APACmonth04. \BBOQ\APACrefatitleProbabilistic detection of GNSS spoofing using opportunistic information Probabilistic detection of GNSS spoofing using opportunistic information.\BBCQ \BIn \BemProc. IEEE/ION PLANS. \APACaddressPublisherMonterey, CA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2021. \BBOQ\APACrefatitleAutonomous integrity monitoring for vehicular navigation with cellular signals of opportunity and an IMU Autonomous integrity monitoring for vehicular navigation with cellular signals of opportunity and an IMU.\BBCQ \APACjournalVolNumPagesIEEE Trans. Intell. Transp. Syst.2365586–5601. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2018\APACmonth04. \BBOQ\APACrefatitlePreliminary assessment on the vulnerability of NMA-based Galileo signals for a special class of record & replay spoofing attacks Preliminary assessment on the vulnerability of NMA-based galileo signals for a special class of record & replay spoofing attacks.\BBCQ \BIn \BemProc. IEEE/ION PLANS. \APACaddressPublisherMonterey, CA, USA. \PrintBackRefs\CurrentBib
- \APACinsertmetastarMozilla2023{APACrefauthors}Mozilla. \APACrefYearMonthDay2023. \BemIchnaea. \APAChowpublishedhttps://github.com/mozilla/ichnaea/blob/main/ichnaea/api/locate/mac.py. \APACaddressPublisherGitHub. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2019\APACmonth05. \BBOQ\APACrefatitleSecurity of GPS/INS based on-road location tracking systems Security of GPS/INS based on-road location tracking systems.\BBCQ \BIn \BemProc. IEEE S&P. \APACaddressPublisherSan Francisco, CA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022. \BBOQ\APACrefatitleGPS spoofing detection via crowd-sourced information for connected vehicles GPS spoofing detection via crowd-sourced information for connected vehicles.\BBCQ \APACjournalVolNumPagesComput. Netw.216109230. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2016\APACmonth10. \BBOQ\APACrefatitleSPREE: A Spoofing Resistant GPS Receiver SPREE: A spoofing resistant GPS receiver.\BBCQ \BIn \BemProc. 22nd ACM MobiCom. \APACaddressPublisherNew York, NY, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2017\APACmonth05. \BBOQ\APACrefatitleGPS-INS outlier detection & elimination using a sliding window filter GPS-INS outlier detection & elimination using a sliding window filter.\BBCQ \BIn \BemProc. Am. Control Conf. \APACaddressPublisherSeattle, WA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2020\APACmonth06. \BBOQ\APACrefatitleGeneration of realistic signal strength measurements for a 5G Rogue Base Station attack scenario Generation of realistic signal strength measurements for a 5G rogue base station attack scenario.\BBCQ \BIn \BemProc. IEEE CNS. \APACaddressPublisherAvignon, France. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022\APACmonth08. \BBOQ\APACrefatitleAn Experimental Study of GPS Spoofing and Takeover Attacks on UAVs An experimental study of GPS spoofing and takeover attacks on UAVs.\BBCQ \BIn \BemProc. 31st USENIX Security. \APACaddressPublisherBoston, MA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2018\APACmonth06. \BBOQ\APACrefatitleOn the impact of rogue base stations in 4G/LTE self organizing networks On the impact of rogue base stations in 4G/LTE self organizing networks.\BBCQ \BIn \BemProc. 11th ACM WiSec. \APACaddressPublisherStockholm, Sweden. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2020\APACmonth08. \BBOQ\APACrefatitleDrift with devil: Security of multi-sensor fusion based localization in high-level autonomous driving under GPS spoofing Drift with devil: Security of multi-sensor fusion based localization in high-level autonomous driving under GPS spoofing.\BBCQ \BIn \BemProc. 29th USENIX Security. \APACaddressPublishervirtual event. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2020. \BBOQ\APACrefatitleGenerative adversarial network in the air: Deep adversarial learning for wireless signal spoofing Generative adversarial network in the air: Deep adversarial learning for wireless signal spoofing.\BBCQ \APACjournalVolNumPagesIEEE Trans. Cogn. Commun. Netw.71294–303. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2023\APACmonth04. \BBOQ\APACrefatitleDetecting GNSS misbehavior leveraging secure heterogeneous time sources Detecting GNSS misbehavior leveraging secure heterogeneous time sources.\BBCQ \BIn \BemProc. IEEE/ION PLANS. \APACaddressPublisherMonterey, CA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2017\APACmonth10. \BBOQ\APACrefatitleKey reinstallation attacks: Forcing nonce reuse in WPA2 Key reinstallation attacks: Forcing nonce reuse in WPA2.\BBCQ \BIn \BemProc. ACM CCS. \APACaddressPublisherDallas, TX, USA. \PrintBackRefs\CurrentBib
- \APACinsertmetastarWer:J22{APACrefauthors}Werner, D. \APACrefYearMonthDay2022. \BBOQ\APACrefatitleHawkEye 360 detects GPS interference in Ukraine HawkEye 360 detects GPS interference in Ukraine.\BBCQ \APACjournalVolNumPagesSPACENEWS. {APACrefURL} [2022-10-20]https://spacenews.com/hawkeye-360-gps-ukr/ \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2012. \BBOQ\APACrefatitlePractical cryptographic civil GPS signal authentication Practical cryptographic civil GPS signal authentication.\BBCQ \APACjournalVolNumPagesJ. Inst. Navigation593177–193. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022. \BBOQ\APACrefatitleReal-Time Identification of Rogue WiFi Connections in the Wild Real-time identification of rogue WiFi connections in the wild.\BBCQ \APACjournalVolNumPagesIEEE Internet Things J.1076042–6058. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2022. \BBOQ\APACrefatitleProtecting GNSS open service navigation message authentication against distance-decreasing attacks Protecting GNSS open service navigation message authentication against distance-decreasing attacks.\BBCQ \APACjournalVolNumPagesIEEE Trans. Aerosp. Electron. Syst.5821224–1240. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2019\BCnt1\APACmonth01. \BBOQ\APACrefatitleOn the effects of distance-decreasing attacks on cryptographically protected GNSS signals On the effects of distance-decreasing attacks on cryptographically protected GNSS signals.\BBCQ \BIn \BemProc. ION ITM. \APACaddressPublisherReston, VA, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2019\BCnt2\APACmonth03. \BBOQ\APACrefatitleSecure multi-constellation GNSS receivers with clustering-based solution separation algorithm Secure multi-constellation GNSS receivers with clustering-based solution separation algorithm.\BBCQ \BIn \BemProc. IEEE Aerosp. Conf. \APACaddressPublisherBig Sky, MT, USA. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2021. \BBOQ\APACrefatitleFast Multiple Fault Detection and Exclusion (FM-FDE) Algorithm for Standalone GNSS Receivers Fast multiple fault detection and exclusion (FM-FDE) algorithm for standalone GNSS receivers.\BBCQ \APACjournalVolNumPagesIEEE Open J. Commun. Soc.2217–234. \PrintBackRefs\CurrentBib
- \APACrefYearMonthDay2015\APACmonth11. \BBOQ\APACrefatitleDetection and exclusion RAIM algorithm against spoofing/replaying attacks Detection and exclusion RAIM algorithm against spoofing/replaying attacks.\BBCQ \BIn \BemProc. Int. Symp. GNSS. \APACaddressPublisherKyoto, Japan. \PrintBackRefs\CurrentBib