Practical GPS Spoofing
Team: Henry Riker
Background
Motivation
Improve existing GPS spoofing algorithms
Objectives
- Make a GPS system spoofproof
- Detect and locate spoofers
- Make an undetectable spoofer
Data signal PRN
XOR signal
Spoofer Requirements
- Understand language satellites speak
- Location and velocity of satellite
- Complex spoof algorithm
24-32 satellites, in 6 orbits, transmitting simultaneously
Each satellite has its own language
System
Basic Spoofing
Received Signal
- A = Amplitude
- t = GPS Time
- i = Set of All Satellites
- p = Satellite Transmission
- F = Doppler Shift
- n(t) = Ambient Noise
- Tau (τ) = Time Received
Determines location of one satellite
GNURadio receiver
Output
L1 Frames
Preamble Detection
Correlation of Bits and Preamble
Conclusions
- Simulated spoofed GPS signals
- Increased understanding of GPS protocols
- Built a GNURadio GPS receiver
Next steps: Switch to a Unix implementation and use an ADALM-PLUTO receiver