Securing Critical Infrastructures from Jamming and Spoofing Cyberattacks

Every day, all of us use this little technological miracle called GPS to take advantage of precise and trustable position, navigation and timing (PNT), all over the world.

More than 2,000 billion Euros of critical infrastructures around the world are directly dependent upon GPS every day – including public and private, aerospace and defense, smart cities, IoT, finance, industry, automotive, ITS, mobility, broadcast and telecom, and Cloud. All benefit from this accurate and trustable PNT service to support their operations.

Without accurate time on a digital terrestrial network, you would get a frozen image on your TV screen.

Without an accurate position on your car’s GPS, you would still be using paper maps.

Did you know?
5 days without GPS/GNSS means 5B£ of economic loss… just for the UK.

Did you know?
The expansion and dependence of GPS into our daily lives and in every public or private industry also comes with technology risks, called jamming (signal interfered with a jammer, meaning no GPS signal) and spoofing (GPS signal hacked intentionally, meaning signal deception).

Did you know?
Jammers and spoofers are strictly forbidden by law and subject to heavy fees (>$200.000 in the United States of America). But they are relatively easy and cost effective to buy and/or build.

For example, a truck driver might use one who to remain off-grid from his fleet manager. Or a teenager might be caught spoofing GPS to play Pokemon Go. It happens all the time.

A more serious GPS spoofing event happened recently in the Black Sea. It’s consequence was significant. Military navy ships went blind and were unable to locate each other.

To make it worse, using a GPS jammer could not only affect a single location … but could affect up to multiple miles of radius!

This risk is real and can impact all industries, globally.

If PNT infrastructures are using multiple GNSS constellations, are they resilient to such cyberattacks?

Actually, no. All GNSS constellations (GPS, Galileo, Beidou, Glonass, IRNSS, QZSS) are weak RF signals, easy to interfere with and easy to jam. Having multiple constellations allows you to get better sky visibility with more satellites, avoiding signal reception loss. However, it is ineffective to counter cyberattacks such as jamming and spoofing. In fact, your PNT infrastructure may experience jamming and spoofing and you might not even know it … until your critical infrastructure goes down. Without specific GPS jamming/spoofing monitoring, your system is blind and may distribute non-reliable PNT data.

What if a PNT infrastructure is combined with other sensors like IMUs (position and navigation) but still has holdover capabilities (for time)?

IMU (position and navigation) and Holdover (time) will maintain PNT distribution in case of signal reception loss. However, PNT data will drift over time and cannot be maintained at the required accuracy level without being synched with an accurate and authenticated PNT source like GPS or GNSS.

In the case of spoofing, IMU should be able to provide a position and navigation backup only, and only on the condition that the PNT infrastructure is able to detect spoofing. Otherwise, the immediate consequence will be that only corrupted PNT data will be distributed over your network…

What are PTA steps (Protect, Toughen, Augment) to secure a PNT infrastructure?

What Is BroadShield?

BroadShield is the #1 GPS cybersecurity solution in the market, benchmarked over the last ten years by the US DoD. As software, it is available for SecureSync time servers or can even be integrated into third-party equipment.

What Is STL?

STL is a satellite time and location service from the Iridium® constellation. It offers two major benefits for timing Infrastructures:

  • RF Signal is 1,000 time stronger than GPS or GNSS, making it very hard to jam
  • RF Signal is also encrypted, making it very hard to spoof

Learn more about BroadShield and STL.

  1. Assess the Resiliency of your PNT infrastructure to cyberattacks
    Action item: Do a health check of your GPS Time and Location infrastructure.
  2. Apply resilient PNT solutions and systems that fit within your infrastructure’s requirements
    Action item: Secure GPS Source from jamming attempts with an anti-jam antenna. Filtering the GPS RF signal by eliminating jamming attempts with an anti-jam antenna will allow you to receive and maintain a trustable GPS reception source. This is a simple & cost-effective solution to apply.
    Action item: Secure your GPS PNT service from jamming and spoofing with BroadShield and STL. Detecting GPS jamming and spoofing is key to automatically trigger and smoothly achieve a resilient PNT service.
  3. Perform multiple PNT health checks per year to assess the resiliency of your PNT infrastructure and anticipate innovative cyberattack patterns.
    Like viruses in the IT industry, PNT cyberattacks are evolving and proliferating. To combat them requires a focused, innovative and resilient PNT company as a partner. With a global presence, Orolia will support your operations to ensure your infrastructure and operations are resilient.

For more information about Orolia’s resilient PNT systems and solutions, contact us.

How Much Will a GPS Outage Cost You?

By Robyn Federman, Head of Global Commercial Marketing for Orolia

Most think of GPS as simply a way to get directions from their smartphone, or to tell a friend where they’re hanging out. Those of us who develop resilient positioning, navigation and timing solutions (PNT) for a living know that there’s a lot more to it.

GPS generates about $1.4 trillion for the private sector, according to the National Institute of Standards and Technology (NIST). February 2021 marked the one-year anniversary of the federal government’s Executive Order on Resilient PNT, which identified these six GPS-dependent infrastructure areas as critical to the national and economic security of the United States:

  • Electrical power grid
  • Communications infrastructure and mobile devices
  • All modes of transportation
  • Precision agriculture
  • Weather forecasting
  • Emergency response

For any of these critical areas, losing the GPS signal either due to intentional attack or accidental outage would wreak havoc, both in terms of lost services, lost revenue and potentially lost lives. The impact of lost services is easy to imagine: No traffic lights, no electricity, no trains or subways; digital phone networks that can’t relay calls; emergency rescue teams that can’t locate their victims. But what do you think the economic impact of a GPS outage might be?

As it turns out, in 2018 NIST commissioned a research study to determine exactly that. Over a 30-day period, it’s about a whopping $30 billion. That’s enough to give you pause, if you haven’t thought about this issue already.

Obviously, some infrastructures would be more affected than others. For example, the impact to the financial industry would be near zero. Why? Because they already have robust and resilient backup systems in place to augment GPS in the event of a signal loss. Business as usual, then, for Wall Street.

But how about the six critical infrastructure areas outlined in the PNT Executive Order? As you might expect, it varies significantly by industry. The following infographic shows you the financial impact of a 30-day GPS outage, on an industry-by-industry basis.

So the next time you’re stuck in a tunnel underground and your smartphone won’t give you directions, remember this: It could be a lot worse. And count your blessings that companies like Orolia and other members of the Open PNT Industry Alliance, along with the Resilient Navigation and Timing Foundation, are fighting to ensure that a wide range of backup solutions for GPS signal loss are being developed, promulgated and thoroughly studied by the appropriate government agencies. To learn more, we suggest the following resources:

Open PNT Industry Alliance

Resilient Navigation and Timing Foundation

What is Resilient PNT?

PNT Executive Order Resource Center

National Institute of Standards and Technology