When Will Terrorists Start Spoofing GPS?

Transcription

1 When Will Terrorists Start Spoofing GPS? Counter Terror 19 th April 2016 Prof. Charles Curry BEng, CEng, MITP, FIET Chronos Technology Ltd

2 Black Swan Events Nassim Nicholas Taleb 2007 The Black Swan Surprise to the observer Significant impact With hindsight could have been predicted

3 Presentation Contents Background Research What is Spoofing? Spoofing & Jamming Who and Why? Where to buy your Jammers & Spoofers Recent Events

4 UK Research since 2008

5 Latest Testing Sennybridge 2015 UK Mod Range in Brecon Beacons Distance Testing of 3W Jammer Detection of Jammers in Container Photographing a Passing Jammer 22/04/2016 Chronos Technology: COMPANY PROPRIETARY 5

6 Detection of 3W Jammer Approx 6Km 22/04/2016 Chronos Technology: COMPANY PROPRIETARY 6

7 What is Spoofing? A GPS spoofing attack attempts to deceive a GPS receiver by broadcasting counterfeit GPS signals Wikipedia 2016 Spoof Position Spoof Time Academic Research topic Dr Todd Humphreys until /04/2016 Chronos Technology: COMPANY PROPRIETARY 7

8 Spoofing: how hard could it be? Hardware: HackRF ( 200), bladerf ( 400) - both crowd funded; Ettus Research USRP B210 ( 800) Nuand bladerf 28MHz, 12-bit, USB3 Ettus Research B210 61MHz, 12-bit, USB3 HackRF One 20MHz, 8-bit, USB2 Entirely open source All of these devices can tune to any one of the GNSS frequencies Slide courtesy of Dr Robert Watson University of Bath Electronics Dept 8

9 What Happened in 2015? A Beginners Guide to low cost Spoofing! 22/04/2016 Chronos Technology: COMPANY PROPRIETARY 9

10 Spoofing & Jamming - Who and Why? Privacy & Covert Operations Mainly Jamming Personal Aggravation Disruption Personal Privacy Criminal Privacy Organised Crime Gangs (OCG) Cyber Security Service Denial Jamming & Spoofing Cyber Crime Civil Disruption/Terrorism Nation State

11 Personal Aggravation Disruption Multi band jammers jam GPS as well as mobile phones GPS: MHz CDMA: MHz DCS: MHz GSM: MHz PHS: MHz CDMA1900: MHz WiFi: MHz 11

12 Personal Privacy Case Study Three Switch GPS based fleet tracking technology used here Resilient Timing System using Rb/OCXO holdover not impacted by jamming

13 Criminal Privacy Recent arrest apprehended a detagged criminal who was a passenger in a van. The driver was using a cigarette lighter style jammer. Concerned about covert tracking technology.

14 Organised Crime Photos courtesy of NaVCIS & Hampshire

15 Scene of Crime Photos Cigarette Lighter style Jammer hot wired to car battery Photo courtesy of Hampshire Police Photo courtesy of AVCIS

16 Civil Disruption/Terrorism -1 25m off ground near City Airport Purple Total Denial of Service Red Major Errors and Unable to get Fix Yellow Large Errors, possible loss of lock

17 Civil Disruption/Terrorism - 2

18 Nation State - 1 Prof. Jiwon Seo -Yonsei University, South Korea Resilient PNT Forum II, Dana Point, California - January 26,

19 Nation State - 2 North Korea is using radio waves to jam GPS navigation systems near the border regions, South Korean officials said.

20 Impact of similar Jammer on London 100 Watt Jammer Shard Floor 72 Simulation courtesy Mike Jones Roke Manor Research 22/04/2016 Chronos Technology: COMPANY PROPRIETARY 20

21 Where to buy Jammers Over 50 active Chinese Web Sites Power ~ 100mW to 50W! 250mW 3W 500mW

22 Buying a 3W Jammer

23 UK Law Not illegal to possess However - No legal reason for use! Offence under Wireless Telegraphy Act 2006 Causing Deliberate Interference Maximum 2 years in prison - Unlimited Fine Offence under EMC Directive EC89/336 Electromagnetic compatibility Regs SI 2006/3418 Supplying Jammers Fine of up to 5000 Google Ofcom Jammers for more info 23

24 London Events/Month >30 Seconds 150 April 2015 to Now 100 Near London Stock Exchange 22/04/2016 Chronos Technology: COMPANY PROPRIETARY 24

25 Conclusion Are we ready for a GPS based Black Swan? Terrorists Do they know about GPS Jammers? Criminals do! OCGs use Jammers Generally More Powerful Did you know about Jammers? Learn with the SENTINEL Report /SENTINEL_Project_Report.pdf 25

26 Thankyou