wavedone

GNSS Spoofing Detection in Aviation Using ADS-B Correlation

GNSS Spoofing Detection in Aviation Using ADS-B Correlation

As global navigation satellite systems become increasingly vulnerable to spoofing attacks, the aviation industry is turning to ADS-B correlation techniques to protect aircraft navigation integrity.

Introduction

Global Navigation Satellite Systems (GNSS) have become fundamental to modern aviation navigation, providing precise positioning, navigation, and timing (PNT) data essential for flight operations. However, the vulnerability of GNSS signals to spoofing attacks—where false signals are transmitted to deceive receivers—poses a critical threat to aviation safety. This article examines how Automatic Dependent Surveillance-Broadcast (ADS-B) correlation techniques offer a robust solution for detecting and mitigating GNSS spoofing in commercial aircraft.

ADS-B System Overview

Automatic Dependent Surveillance-Broadcast (ADS-B) is a surveillance technology that enables aircraft to determine their position via satellite navigation and periodically broadcast it, along with other data, to ground stations and other aircraft. The system consists of two main components:

ADS-B Out

Aircraft transmit their position, velocity, altitude, and identification information derived from onboard navigation systems. These broadcasts occur at 1090 MHz (Mode S Extended Squitter) or 978 MHz (Universal Access Transceiver) depending on aircraft class and region.

ADS-B In

Aircraft receive broadcasts from other aircraft and ground stations, enabling enhanced situational awareness and supporting applications like Traffic Information Service-Broadcast (TIS-B) and Flight Information Service-Broadcast (FIS-B).

The key advantage of ADS-B for spoofing detection lies in its independence from GNSS for verification purposes. While ADS-B position data typically originates from GNSS, the broadcast messages can be cross-correlated with ground-based multilateration (MLAT) systems and other independent surveillance sources.

GNSS/ADS-B Correlation Techniques

GNSS/ADS-B correlation leverages the relationship between satellite-derived positions and independently verified surveillance data to identify discrepancies indicative of spoofing attacks.

Position Consistency Checking

The fundamental approach compares GNSS-derived positions with ADS-B reported positions verified through ground-based receivers. When an aircraft’s GNSS solution diverges significantly from its ADS-B position as verified by multiple ground stations, a potential spoofing event is flagged.

Velocity and Trajectory Analysis

Spoofing attacks often introduce unrealistic velocity changes or trajectory deviations. By analyzing the kinematic consistency between successive ADS-B reports and expected aircraft performance envelopes, detection algorithms can identify anomalous behavior patterns consistent with spoofing.

Time-of-Arrival Correlation

Ground-based ADS-B receivers can calculate aircraft position using time-difference-of-arrival (TDOA) multilateration. Comparing these independent position solutions with GNSS-derived positions provides a robust cross-check that doesn’t rely on satellite signals.

Multi-Constellation Cross-Validation

Modern aircraft often receive signals from multiple GNSS constellations (GPS, GLONASS, Galileo, BeiDou). Correlating ADS-B data with position solutions from independent constellations can reveal constellation-specific spoofing attacks.

Spoofing Detection Algorithms

Several algorithmic approaches have been developed for GNSS spoofing detection using ADS-B correlation:

Statistical Hypothesis Testing

Algorithms employ statistical tests to compare the null hypothesis (no spoofing) against the alternative hypothesis (spoofing present). Key metrics include:

  • Position Residual Analysis: Computing residuals between GNSS and ADS-B verified positions, with thresholds based on expected navigation system performance.
  • Chi-Square Tests: Evaluating whether observed position discrepancies exceed statistically expected bounds.
  • CUSUM (Cumulative Sum) Detection: Identifying small, persistent biases that may indicate sophisticated spoofing attacks.

Machine Learning Approaches

Recent research has applied machine learning techniques to spoofing detection:

  • Supervised Classification: Training classifiers on labeled datasets of nominal and spoofed flight data to recognize attack patterns.
  • Anomaly Detection: Using unsupervised learning to identify deviations from normal flight behavior without requiring labeled attack data.
  • Neural Networks: Deep learning models that process time-series ADS-B data to detect subtle spoofing signatures.

Kalman Filter-Based Detection

Extended Kalman Filters (EKF) and Unscented Kalman Filters (UKF) integrate ADS-B measurements with aircraft dynamic models to estimate true position. Significant innovations in the filter residuals indicate potential spoofing.

Signal Quality Monitoring

Advanced receivers monitor GNSS signal quality metrics (carrier-to-noise ratio, correlation peak shape, signal power) alongside ADS-B correlation to provide multi-layer detection.

Implementation in Commercial Aircraft

Implementing GNSS spoofing detection in commercial aviation requires integration with existing avionics architectures and compliance with stringent certification requirements.

Avionics Integration

Modern flight management systems (FMS) and navigation units are being upgraded to incorporate spoofing detection capabilities:

  • Multi-Sensor Fusion: Integrating GNSS, ADS-B, inertial reference systems (IRS), and ground-based navigation aids (VOR, DME) for cross-validation.
  • Onboard Processing: Dedicated processors run detection algorithms in real-time, providing immediate alerts to flight crews.
  • Display Integration: Spoofing alerts are presented on navigation displays and electronic flight bags (EFB) with appropriate priority and crew procedures.

Certification Requirements

Implementation must comply with aviation certification standards:

  • DO-178C: Software considerations in airborne systems certification.
  • DO-254: Hardware design assurance for airborne electronic hardware.
  • DO-373: Guidance on civil GNSS integrity and authentication (emerging standard addressing spoofing).

Operational Procedures

Airlines are developing standard operating procedures for spoofing events:

  • Crew training on recognizing and responding to spoofing alerts
  • Reversion to conventional navigation methods when GNSS integrity is compromised
  • Reporting procedures for suspected spoofing incidents
  • Coordination with air traffic control for alternative routing

Regulatory Mandates and Adoption

Regulatory bodies worldwide are increasingly recognizing GNSS spoofing as a critical aviation safety issue and implementing mandates to address the threat.

International Civil Aviation Organization (ICAO)

ICAO has issued guidance material on GNSS vulnerability and is developing standards for spoofing detection and mitigation. The organization emphasizes the need for:

  • Multi-constellation, multi-frequency GNSS receivers
  • Integration of alternative PNT sources
  • Enhanced monitoring and reporting of GNSS interference

Federal Aviation Administration (FAA)

The FAA has issued multiple safety alerts regarding GNSS interference and is working on regulatory frameworks for spoofing detection:

  • AC 90-105A: Approval guidance for RNP operations and RF interference
  • Special Conditions: New aircraft certifications increasingly require spoofing detection capabilities
  • NextGen Integration: Incorporating spoofing resilience into the Next Generation Air Transportation System

European Union Aviation Safety Agency (EASA)

EASA has published guidance on GNSS vulnerability and is developing certification specifications for spoofing detection in European airspace.

Industry Adoption

Commercial adoption is accelerating:

  • Airline Fleets: Major carriers are retrofitting existing aircraft and specifying spoofing detection for new deliveries
  • Avionics Manufacturers: Honeywell, Collins Aerospace, and Thales are integrating advanced spoofing detection into next-generation navigation systems
  • Regional Variations: Adoption is most advanced in regions with documented spoofing incidents (Middle East, Eastern Europe, East Asia)

Future Regulatory Direction

Expected regulatory developments include:

  • Mandatory spoofing detection for aircraft operating in high-risk airspace
  • Standardized reporting of GNSS interference incidents
  • Requirements for authenticated GNSS signals (when available)
  • Integration of terrestrial backup systems for critical phases of flight

Conclusion

GNSS spoofing represents a growing threat to aviation safety, but ADS-B correlation techniques provide a practical and effective detection mechanism. By leveraging the existing ADS-B infrastructure and developing sophisticated detection algorithms, the aviation industry can maintain navigation integrity even in contested electromagnetic environments. As regulatory mandates evolve and technology matures, GNSS spoofing detection will become a standard feature of commercial aircraft navigation systems, ensuring the continued safety and reliability of global air travel.

The path forward requires continued collaboration between regulators, manufacturers, airlines, and technology providers to implement comprehensive spoofing detection capabilities across the global aviation fleet. The stakes—safe navigation for millions of passengers daily—demand nothing less.