Search

Nowadays, Unmanned Aerial Vehicle systems have proven to be very useful in a variety of applications, such as monitoring and surveying an area of interest, mapping inaccessible terrain, real-time traffic monitoring, reconnaissance missions, transport of loads, and also for military purposes. The movement and stability in the air of these systems is dependent on the on-board sensors such as GNSS sensors, proximity sensors, accelerometer, gyroscope, light and temperature sensors. GNSS sensors are vital devices capable of processing navigation signals to determine the position, orientation and speed of the UAV system during operation. GNSS sensors are also used in many applications that require navigation data as well as highly accurate synchronization data. Both GNSS systems and the sensors that process their data have been shown to be vulnerable to jamming and spoofing attacks. GNSS sensors are of particular importance and the information provided by them requires protection. Considering these things, this paper aims to carry out a study in which several UAV systems will be exposed to signal samples with manipulated navigation data. This study will help us to assess the impact of exploiting GNSS sensor vulnerabilities and the effects it can have during the operation of UAV systems. [ABSTRACT FROM AUTHOR]

Copyright of CISTI (Iberian Conference on Information Systems & Technologies / Conferência Ibérica de Sistemas e Tecnologias de Informação) Proceedings is the property of Conferencia Iberica de Sistemas Tecnologia de Informacao and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)

Computer network attacks are vast and negatively impact the infrastructure and its applicational services. From a cyber offensive and defensive perspective, there are a plethora of tools to craft and inject customized malicious packets in the network and exploit operating systems and application vulnerabilities. Those tools are however hard to operate by practitioners with less knowledge on networking fundamentals and students in the early stage of their studies. This paper proposes an easy-to-use application tool that can produce customized Denial of Service (DoS) and spoofing attacks. It was developed in Python and takes advantage of scapy library to process and inject network packets. A set of experiments was made, and the results obtained show the efficiency and accuracy of the attacks, by impairing the proper functioning of the victim's machines. [ABSTRACT FROM AUTHOR]

Jamming and spoofing can pose significant threats to space-based assets and the services provided by them. Global navigation satellite systems (GNSS) are specifically vulnerable in this respect, considering the very low power of their signals and services. Numerous incidents of GNSS jamming and spoofing have already been reported. Cases of jamming are often not intentional and regularly have only short-term and geographically limited impacts. However, there are also intentional cases of jamming and spoofing is intentional by default. Due to their importance for military operations, for critical national infrastructure and key economic sectors, GNSS constitute primary targets of intentional jamming and spoofing. The paper analyses remedies in response to jamming and spoofing under international law as well as aspects of national law in relation to jamming and spoofing of GNSS signals. [ABSTRACT FROM AUTHOR]

Cyber space is not Outer Space and cyber activities are different to space activities. But where are the dividing lines? Space law applies to cyber activities when they are space activities. This leads to the question how we define space activities in the meaning of the Outer Space Treaty. With increasingly refined space applications, including satellite communication, remote sensing and navigation and networked environments that span from the Earth into Outer Space, space activities need to be defined more precisely. The other term that needs to be defined are cyber activities. They depend on network connectivity and this is the possible connecting point with space activities. However, in a computer networked environment, not every signal that traverses through Outer Space becomes a space activity. Based on the definition of both, space and cyber activities, this article attempts to delineate their intersection for a practicable understanding about when a cyber activity is a space activity. Following this approach, additional terms and concepts in connection with unauthorized cyber activities need to be more precisely distinguished, including jamming, spoofing, interference and attack. More precise definitions are key to the understanding of the concepts and the linkage between cyber and space activities. [ABSTRACT FROM AUTHOR]

Multilateration techniques have been proposed to verify the integrity of unprotected location claims in wireless localization systems. A common assumption is that the adversary is equipped with only a single device from which it transmits location spoofing signals. In this paper, we consider a more advanced model where the attacker is equipped with multiple devices and performs a geographically distributed coordinated attack on the multilateration system. The feasibility of a distributed multi-device attack is demonstrated experimentally with a self-developed attack implementation based on multiple COTS software-defined radio (SDR) devices. We launch an attack against the OpenSky Network, an air traffic surveillance system that implements a time-difference-of-arrival (TDoA) multilateration method for aircraft localization based on ADS-B signals. Our experiments show that the timing errors for distributed spoofed signals are indistinguishable from the multilateration errors of legitimate aircraft signals, indicating that the threat of multi-device spoofing attacks is real in this and other similar systems. In the second part of this work, we investigate physical-layer features that could be used to detect multi-device attacks. We show that the frequency offset and transient phase noise of the attacker's radio devices can be exploited to discriminate between a received signal that has been transmitted by a single (legitimate) transponder or by multiple (malicious) spoofing sources. Based on that, we devise a multi-device spoofing detection system that achieves zero false positives and a false negative rate below 1%. [ABSTRACT FROM AUTHOR]

In this paper, we introduce the type of spoofing signal and the method of spoofing mitigation. The spoofing has three type: simplistic, intermediate, sophisticated and we will be interested in the intermediate spoofing. The intermediate spoofers synchronize its counterfeit GNSS signals with the current broadcast GNSS signals. So, if the receiver is attacked by a spoofer, it should be able to detect the spoofing signal through the absolute and relative GNSS signal strength, signal strength changing rate, Bound and compare range rates, etc. There are two way to mitigate spoofing signal, elimination of spoofing channel through the signal processing and counterbalance of spoofing signal through the RF phase control. For simulation, we generated the intermediate spoofing signal using the software GNSS signal generator simulator(SGGS), the intermediate spoofers synchronize its counterfeit GPS signals with the current broadcast GPS signals and generated the anti-spoofing signal to mitigate the spoofing signal. The software GPS receiver simulator(SGRS) received the mixed signal the spoofing, anti-spoofing and normal signal from SGGS, and process the signals. In paper, we can check that the DLL and PLL tracking loop error are generated and pseudo-range is changed linear according to mitigate to spoofing signal when the anti-spoofing signal is entered. As a result, we can check that navigation solution is changed from abnormal by spoofing signal to normal by anti-spoofing signal. [ABSTRACT FROM PUBLISHER]

GPS spoofing is an attack based on transmission of false signals to target receivers, in order to force the computation of incorrect time, position or velocity information. It is a threat which is recently considered with continuously growing awareness. There is a need for effective way of GPS spoofing detection. Many groups of methods are proposed in the literature. Spatial processing methods are considered to be robust in a wide range of scenarios and may fail only when a very sophisticated device is used for spoofing. In this article, a spoofing detection method, based on phase delay measurements, is proposed. Accuracy and precision of phase delay estimation is assessed for various qualities of received signal. Spoofing detection thresholds are determined. Efficiency of this method is evaluated in terms of probability of false alarm and probability of detection. [ABSTRACT FROM PUBLISHER]

Wireless LANs are quite popular and have found wide spread usage amongst various segments. The issue of spoofing, and its detection, in Wireless LANs has been a matter of serious debate and received wide spread attention in research community as well. Spoofing is a potent weapon in the hands of a Cyber Criminal. The very characteristics of spoofing makes the task of identification and tracking back of the perpetrator / initiator in Cyber Crimes very difficult, e.g. those relating to denial of service, session hijacking, and address masquerading attacks by changing its network identifiers in WLANs. One way to overcome the problem of spoofing is to authenticate the frames. However, in 802.11 WLANs, authentication and encryption for management and control frames is not provided. It is also observed that present MAC spoofing detection techniques bring out large number of false positives. This paper analyses the various spoofing detection methods in WLANs bringing out their pros and cons including the different level of security provided ranging from low to high. The analysis in the paper also brings out as to which particular method could be more suitable in a particular scenario and how one can easily get the reduced false positives, which has been a bane of current detection methods. The paper also presents two case scenarios, particularly highlighting the victim Silent case scenario not discussed much thus far in the current literature on the topic, to validate the results. By way of retrospect, an outline of future work is also suggested in the concluding remarks. [ABSTRACT FROM PUBLISHER]

Spoofing and jamming in the form of transmitting counterfeit location information and denying services are an emerging threat to GNSS receivers. In general, spoofing is a deliberate attack that aims to coerce GNSS receivers into generating false navigation solutions. The spoofing attack is potentially more hazardous than jamming since the target receiver is not aware of this threat and it is still providing position/navigation solutions which seem to be reliable. One major limitation of spoofers is that they are required to transmit several highly correlated GNSS signals simultaneously often from a single source in order to present a truthful navigation solution to the receiver. Different GNSS signals sourced from a single transmitter have essentially the same spatial signature, which as shown in this paper, can be utilized to discriminate the spoofing signals. In this paper a moving antenna is investigated to discriminate between the spatial signatures of the authentic and the spoofing signals based on monitoring the amplitude and Doppler correlation of the visible satellite signals. The effectiveness of this detection method is studied and verified based on a set of experiments. [ABSTRACT FROM PUBLISHER]

Electronic markets have emerged as popular venues for the trading of a wide variety of financial assets, and computer based algorithmic trading has also asserted itself as a dominant force in financial markets across the world. Identifying and understanding the impact of algorithmic trading on financial markets has become a critical issue for market operators and regulators. We propose to characterize traders' behavior in terms of the reward functions most likely to have given rise to the observed trading actions. Our approach is to model trading decisions as a Markov Decision Process (MDP), and use observations of an optimal decision policy to find the reward function. This is known as Inverse Reinforcement Learning (IRL), and a variety of approaches for this problem are known. Our IRL-based approach to characterizing trader behavior strikes a balance between two desirable features in that it captures key empirical properties of order book dynamics and yet remains computationally tractable. Using an IRL algorithm based on linear programming, we are able to achieve more than 90% classification accuracy in distinguishing High Frequency Trading from other trading strategies in experiments on a simulated E-Mini S&P 500 futures market. The results of these empirical tests suggest that High Frequency Trading strategies can be accurately identified and profiled based on observations of individual trading actions. [ABSTRACT FROM PUBLISHER]

In this paper, we analyze the effect of error of code tracking and frequency tracking according to the chip delay of spoofing signal through the simulation. Firstly, we investigate the type of spoofing signal and defense technical of spoofing attack. For simulation, we generated the intermediate spoofing signal using the software GNSS signal generator simulator(SGGS), the intermediate spoofers synchronize its counterfeit GPS signals with the current broadcast GPS signals. The software GPS receiver simulator(SGRS) received the spoofing signal and normal signal from SGGS, and process the signals. In paper, we can check that the DLL and PLL tracking loop error are generated and pseudo-range is changed non-linear according to chip delay of spoofing signal when the spoofing signal is entered. As a result, we can check that navigation solution is incorrectly affected by spoofing signal. [ABSTRACT FROM PUBLISHER]

Automatic speaker verification (ASV) systems are increasingly being used for biometric authentication even if their vulnerability to imposture or spoofing is now widely acknowledged. Recent work has proposed different spoofing approaches which can be used to test vulnerabilities. This paper introduces a new approach based on artificial, tone-like signals which provoke higher ASV scores than genuine client tests. Experimental results show degradations in the equal error rate from 8.5% to 77.3% and from 4.8% to 64.3% for standard Gaussian mixture model and factor analysis based ASV systems respectively. These findings demonstrate the importance of efforts to develop dedicated countermeasures, some of them trivial, to protect ASV systems from spoofing. [ABSTRACT FROM PUBLISHER]

Spoofed IP traffic (traffic containing packets with incorrect source IP addresses) is often used by Internet-based attackers for anonymity. This method reduces the risk of trace-back and avoids attack detection by traffic-based sensors. In general, attackers may use randomly or selectively chosen IP address space to serve as source IP addresses on attack packets. The IP address allocation process creates room for bogons as well as other prefix space that is either unallocated or semi-dark, i.e. allocated but not in operational use. In this paper, we detail novel techniques to construct filters that cover unallocated and semi-dark space. We then evaluate the use of such IP source prefix filters using efficient filtering techniques on an enterprise network and the correlations of such source IP addresses with malicious traffic or bad actors. Our initial results indicate that there is a high degree of correlation between dark or semi-dark source IP prefix space and malicious traffic. As such, it may be feasible for network operators to deploy effective filters based on dark or semi-dark source IP prefix space that block malicious traffic with a low degree of false positives. Further, the presence of such traffic can serve as an early warning of DoS or other attacks. [ABSTRACT FROM PUBLISHER]

The proposed multi-modality human identification system, which fuses the IRIS and Electroencephalogram (EEG). These approaches are the most popular human identification system when they are considered separately. They can be affected by various direct attacks and spoofing. Hence we combine them to obtain a highly secured human identification system. This integrated system using IRIS and Electroencephalogram biometric with Liveness detection is the first of its kind in the international scenario. Experimental results show that the highest identification performance is obtained and neuro image coding is proposed. These ideas and directions helps to develop new tools, techniques, and methodologies in biometrics, lie detection, crime detection, to detect the record of specific terrorist act or any incident stored in the brain and to intensify brain related methodologies, brain imaging studies and healthcare solutions in future. [ABSTRACT FROM PUBLISHER]

An Identity Is Stolen Every 3 Seconds!! Spoofing is a huge issue for most Internet users - in fact, Identity Theft victimized 10.1 Million Americans last year. In this modern digital world, it is very simple to fool the system and pretend to be anyone. With the identity theft getting simpler day-by-day, make sure you are not being digitally spoofed. These days, it doesn't require a computer genius to intrude your privacy or impersonate the victim. And despite various laws, individuals and businesses are still feeling the negative effects of spam alike. The attacker could use your email to send emails to your contacts/anyone or use your caller ID number to call and eventually talk to people. This paper is an attempt to make the readers aware of the various types of spoofing that exists and also how not to fall in prey to them. It is an examination of the various spoofing techniques used by the attackers and their motives. This work intends to increase the awareness and understanding of the Identity Thefts that are and related frauds throughout the world. A few control measures at the users' level are also suggested. This conceptual paper is definitely expected to contribute to future research on similar and related topics as spin off from this study. [ABSTRACT FROM PUBLISHER]

This paper focuses on a robust and precise car navigation system, which can also be used in GNSS denied or spoofed scenarios. The system is based and designed for so called ‘On Board Units’ (OBU), which are already used for professional road toll and tracking applications. The system combines GNSS and dead reckoning (DR) trajectories, based on odometry and inertial navigation. [ABSTRACT FROM PUBLISHER]

As the field of GNSS application is stretched, the stability of GNSS is concerned. GNSS is connected with the social infrastructure and economic problem. GNSS is used in communication system, military weapon, power station, satellite system, and so on. The information of position and time which is provided by GNSS is related with economy and military capabilities. Thus the threat of GNSS attack will increase in the future. For dealing with this request, ETRI is developing GNSS interference detection system. In this paper, we introduce the GNSS interference detection system and specially focus on the spoofing detection module. The algorithm for detecting the spoofing signal is implemented on the GNSS interference detection system. The result of implemented system is verified by the system test. The functions of spoofing detection module are verified by the spoofing environment which is generated by test-bed. [ABSTRACT FROM PUBLISHER]