GNSS Spoofing Detection in Connected and Autonomous Vehicles: Security Requirements and Defense Strategies

As Connected and Autonomous Vehicles (CAVs) become increasingly dependent on Global Navigation Satellite Systems (GNSS) for positioning, navigation, and timing, the threat of spoofing attacks poses critical safety risks. This article examines the vulnerabilities, attack scenarios, and multi-sensor fusion approaches essential for securing CAV navigation systems.

1. CAV Navigation Dependencies on GNSS

Modern Connected and Autonomous Vehicles rely heavily on GNSS for core operational functions:

1.1 Primary Navigation Functions

Positioning: GNSS provides absolute geographic coordinates essential for route planning and lane-level positioning
Velocity Estimation: Doppler measurements enable accurate speed calculation for motion control
Timing Synchronization: Precise timing is critical for V2X communications, sensor fusion, and coordinated maneuvers
Map Matching: GNSS coordinates enable correlation with high-definition maps for localization refinement

1.2 Integration with Vehicle Systems

GNSS data feeds directly into:

Autonomous driving control algorithms
Advanced Driver Assistance Systems (ADAS)
Vehicle-to-Everything (V2X) communication protocols
Emergency response and eCall systems
Fleet management and telematics

This deep integration creates a large attack surface where compromised GNSS data can cascade through multiple safety-critical systems.

2. Spoofing Attack Scenarios for Vehicles

GNSS spoofing involves transmitting counterfeit satellite signals that deceive receivers into calculating false positions, velocities, or timestamps.

2.1 Attack Vectors

Meaconing Attacks

Simple rebroadcasting of legitimate GNSS signals with delay, causing position offsets. While basic, meaconing can disrupt navigation without sophisticated equipment.

Generative Spoofing

Advanced attackers generate fully synthetic GNSS constellations, enabling:

Position Displacement: Forcing vehicles to believe they are at different locations
Time Manipulation: Disrupting synchronized operations and V2X communications
Trajectory Hijacking: Gradually leading vehicles off-course without triggering anomaly detection

2.2 Realistic Attack Scenarios

Scenario 1: Highway Diversion Attack

An attacker spoofs GNSS signals to make an autonomous vehicle believe it has exited a highway prematurely, causing unexpected route deviations and potential collisions with infrastructure.

Scenario 2: Platooning Disruption

In vehicle platooning operations, spoofed timing signals can desynchronize closely-spaced vehicles, leading to dangerous braking events or collisions.

Scenario 3: Geofencing Bypass

Autonomous delivery vehicles or restricted-area operations can be manipulated to enter prohibited zones by spoofing boundary coordinates.

Scenario 4: Fleet-Wide Coordination Attacks

Large-scale spoofing can affect multiple vehicles simultaneously, creating traffic chaos or enabling coordinated physical attacks.

3. Safety Implications and Risks

3.1 Direct Safety Consequences

Collision Risk: Incorrect positioning can cause vehicles to misjudge lane boundaries, intersections, and obstacles
Loss of Situational Awareness: Compromised navigation degrades the vehicle’s understanding of its environment
Emergency Response Delays: False location data impedes accident response and emergency services
Traffic Flow Disruption: Multiple affected vehicles can create cascading traffic incidents

3.2 Security and Privacy Risks

Vehicle Theft: Spoofing can disable tracking systems or mislead recovery efforts
Surveillance Evasion: Malicious actors can mask vehicle movements for illicit activities
Infrastructure Targeting: Coordinated attacks could focus on critical transportation infrastructure

3.3 Economic and Liability Concerns

Insurance complications from spoofing-induced accidents
Manufacturer liability for inadequate anti-spoofing measures
Regulatory compliance challenges across jurisdictions
Loss of public trust in autonomous vehicle technology

4. Multi-Sensor Fusion Approaches for Spoofing Detection

Robust GNSS spoofing detection requires integrating multiple independent sensors and validation methods.

4.1 Inertial Navigation System (INS) Integration

IMU sensors provide independent motion tracking that can be cross-validated against GNSS outputs:

Dead Reckoning: Short-term position estimation without external signals
Acceleration Consistency: Compare GNSS-derived acceleration with IMU measurements
Rotation Rate Validation: Gyroscope data verifies turning maneuvers match GNSS trajectory

4.2 Visual Odometry and Camera Systems

Feature Tracking: Visual landmarks provide independent position verification
Optical Flow: Motion estimation from camera sequences validates velocity
Map-Based Localization: HD map matching cross-checks GNSS coordinates

4.3 LiDAR and Radar Fusion

Active sensing systems provide:

Environment mapping independent of satellite signals
Relative positioning to known infrastructure
Velocity measurements via Doppler radar

4.4 Cellular and WiFi Positioning

Cell Tower Triangulation: Coarse position validation from network infrastructure
WiFi Fingerprinting: Urban positioning backup using access point databases
5G NR Positioning: Emerging high-accuracy cellular positioning capabilities

4.5 Signal Quality Metrics

Advanced GNSS receivers can detect spoofing through:

Signal Power Analysis: Spoofed signals often exhibit abnormal power levels
Carrier-to-Noise Ratio (C/N₀): Statistical anomalies indicate potential spoofing
Code-Carrier Divergence: Inconsistencies between code and phase measurements
Array Processing: Multi-antenna systems detect signal direction anomalies

4.6 Machine Learning Detection

AI-based approaches analyze patterns across sensor streams:

Anomaly detection in multi-sensor correlation
Behavioral models of legitimate vs. spoofed signals
Real-time classification of attack types

5. Industry Standards and Testing Requirements

5.1 Regulatory Frameworks

ISO/SAE 21434 (Road Vehicles – Cybersecurity Engineering)

Mandates cybersecurity risk assessment including GNSS vulnerability analysis for all vehicle systems.

UNECE WP.29 Regulations

R155: Cybersecurity Management System (CSMS) requirements
R156: Software Update Management System (SUMS)
Both require threat analysis covering positioning system attacks

SAE J3061

Cybersecurity guidebook for cyber-physical vehicle systems, including GNSS threat modeling.

5.2 Testing Standards

RTCA DO-373 / EUROCAE ED-275

GNSS interference and jamming testing standards adaptable for automotive applications.

ISO 11452 Series

Electromagnetic compatibility testing, including susceptibility to RF interference.

5.3 Testing Methodologies

Controlled Spoofing Tests

Record-and-replay attacks in test environments
Generative spoofing with known parameters
Gradual drift attacks to test detection thresholds

Multi-Sensor Validation Testing

Sensor degradation scenarios (GPS-denied environments)
Cross-validation accuracy under attack conditions
Failsafe behavior verification

Penetration Testing

Red team exercises targeting navigation systems
Vulnerability assessments of production vehicles
Supply chain security audits for GNSS components

5.4 Certification Requirements

Emerging certification programs for autonomous vehicles increasingly require:

Documented anti-spoofing countermeasures
Evidence of multi-sensor redundancy
Incident response procedures for navigation failures
Regular security updates for GNSS processing firmware

6. Best Practices for CAV GNSS Security

6.1 Defense-in-Depth Architecture

Signal-Level Protection: Cryptographic authentication (e.g., Galileo OSNMA, GPS Chimera)
Receiver-Level Detection: Real-time signal quality monitoring
System-Level Fusion: Multi-sensor cross-validation
Vehicle-Level Response: Graceful degradation and safe-state transitions

6.2 Operational Recommendations

Implement continuous integrity monitoring during all operations
Define clear fallback procedures for GNSS-denied scenarios
Maintain updated threat intelligence on emerging spoofing techniques
Conduct regular security assessments and penetration tests
Establish incident response protocols for suspected spoofing events

Conclusion

GNSS spoofing represents a critical and growing threat to Connected and Autonomous Vehicles. As CAV deployment accelerates, robust spoofing detection and mitigation must be integral to vehicle design—not an afterthought. Multi-sensor fusion, combining GNSS with INS, visual odometry, LiDAR, and cellular positioning, provides the redundancy necessary for safe operation under attack conditions.

Industry standards are evolving to address these challenges, but manufacturers must go beyond compliance to implement comprehensive defense-in-depth strategies. The safety of passengers, pedestrians, and infrastructure depends on our ability to secure CAV navigation systems against increasingly sophisticated spoofing attacks.

The path forward requires collaboration between automotive manufacturers, GNSS providers, cybersecurity researchers, and regulators to establish robust testing frameworks, certification programs, and continuous monitoring capabilities. Only through sustained commitment to navigation security can we realize the full potential of autonomous vehicle technology while maintaining public trust and safety.

This article provides an overview of GNSS spoofing threats and countermeasures for Connected and Autonomous Vehicles. For implementation-specific guidance, consult relevant industry standards and engage with cybersecurity specialists.