Commercial Flights Are Experiencing ‘Unthinkable’ GPS Attacks and Nobody Knows What to Do::New “spoofing” attacks resulting in total navigation failure have been occurring above the Middle East for months, which is “highly significant” for airline safety.
TL:DR: Israel and Iran are the source of the spoofing.
Edited*
Lemmy is starting to feel like Discord with people dropping lazy images like this in every damn thread.
Wow. The state of Israel is really piling on the reasons to hate it these days.
Iran has been doing this shit for decades. I’m sure Israel has too.
Basically, they figure out what a GPS receiver would hear if it was receiving signals from a specific location, say “London”. They then broadcast those exact signals. Any receiver that hears them now thinks it is in “London”.
Start with the aircraft’s actual position, and update the spoofed location based where it actually is and and its intended destination, and you can get it to go where you want it.
If the aircraft is trying to fly to London, for example, and you want it to turn to the east of its track, you start spoofing that it has drifted west on its track to London. The aircraft thinks it is west of London, and turns to the east to get to spoofed-London.
And Russia was doing it just a few years ago, too.
That just means you can’t use autoland in low visibility conditions. Modern IRUs (inertial reference unit) are highly accurate laser gyros that can use GPS for correction, but will throw out the data if it doesn’t make sense. Navigation won’t be affected much, and autoland (if used) will still rely on VHF guidance.
They know where you took off from, and can detect your movement with precision.
Imagine you can’t see or hear anything but you can read a compass, and you have an internal map of your house and neighborhood. You also know how long your steps are with some amount of accuracy. You would probably be able to get out of your house and maybe to the corner store, but the inaccuracies in your compass and distance estimation would add up over time, and on a long walk you might overshoot the sidewalk and walk down the middle of a busy street by mistake.
First, they have to align on the ground. You initialize them with your current known position (usually by GPS or your known airport/gate spot). Then, you wait for them to synchronize with the Earth’s rotation. If you’re far north, like in Alaska, this could take half an hour. If you’re close to the equator, it could take 5 minutes. Once they’re ready, from that point, any movement you make, it will know where you are and where you’ve been.
If you spin up a gyro and begin moving around, it will maintain it’s starting position. You can use this deflection to calculate direction. If you know how fast you are going and for how long, you’ll have your position.
Mechanical gyros drift. It’s the nature of a world with friction. Newer IRUs use laser gyros, so the only real drift they have comes from extremely minute rounding errors.
Modern IRUs also take input from multiple sources (GPS, Navaids) to update their drift error. With spoofed GPS, bad drift corrections are made and when the navigation solution eventually fails the IRU is just as unusable.
ADIRUs will throw out bad GPS data if it disagrees with multiple IRUs, hence why there’s usually 3 on the aircraft. That being said, if the GPS is close enough to the three, then correction will still be applied.
If they’re using the older IRUs, the drift is corrected via redundancy and not GPS. Usually pilots will report drift based on their final IRU coordinates compared against GPS. Even then, they should still be checking their course with VOR.
But the article mentioned that “the spoofing corrupts the Inertial Reference System”. How?
Yeah I have the same question. Based upon a comment above, it looks like the independent gyro system is updated for drift based upon the spoofed GPS data and thus causes issues. If the IRS is not updated at all then drift becomes a bigger issue but if it’s updated regularly with valid GPS data then it’s a good thing. So the challenge is to only update the gyro drift with valid GPS data which I am guessing is hard to determine.
Pretty much this, look up Kalman filters if you want details. The most likely explanation is that they are tuned to effectively trust GPS more than the internal IMU for long periods of time. Really good IMUs are very expensive and still drift but have high speed output. When it works well, GPS is cheap and doesn’t drift but with a slow update rate. The cost optimisation probably means that the IMU data is usually only trusted for a few seconds, probably 10 min at most before it takes whatever the GPS says as truth. If they lost gps signal through jamming, then they would keep navigation on the less certain IMU data, but the GPS sensor thinks all is well so they shift position.
There is probably a software upgrade to the filter that could be used to limit these attacks, but I imagine it’s an active area or research.
If it’s a smaller plane (such as a CRJ / ERJ) with only one IRU, it will not be able to determine if GPS is valid or not, so the drift correction gets spoiled.
Large commercial aircraft are using 3 IRUs, with newer aircraft using ADIRUs. If GPS does not agree with the three IRUs, the GPS data is thrown out. If the GPS is within tolerance, correction is applied. You could build up very small errors over a long distance, but you should still be pretty close to the airfield when you get there.
Ignore my ignorance. Are you saying the aircrafts track where they are going by calculating their position from gyroscope data? And this is more precise than GPS?
That’s like using the accelaration sensors in your phone to navigate. Or sailing with compass and nautical maps.
Possible. Tech isn’t even that novel. But still impressive.
Yes. Most of commercial navigation systems rely on the IRUs as a primary source of position data, and they’ll usually have 3 of them. VHF is used by the crew to confirm that the aircraft is on track by referencing VOR stations, though these are slowly being phased out due to GPS.
That being said, a single traditional IRU can have up to 2km of drift over a 2 hr flight (at which point it’s removed from service and replaced). When used in combination with two other IRUs, the error is dramatically reduced. Traditional IRUs are gyroscopically mechanical in nature and do not talk to GPS.
Now, that being said, the new standard is called an ADIRU (ADvanced IRU), which ties in with GPS and features laser gyros. They’re extremely accurate and have essentially zero drift, plus multiple redundant components within each unit.
If anyone is really curious about how INS works https://en.m.wikipedia.org/wiki/Inertial_navigation_system
Also this Air Force training audio REALLY clears the subject up: https://youtu.be/VUrMuc-ULmM
The Missile Knows Where It Is
Transcription for the audio is as follows:
"The missile knows where it is at all times. It knows this because it knows where it isn’t. By subtracting where it is from where it isn’t, or where it isn’t from where it is (whichever is greater), it obtains a difference, or deviation. The guidance subsystem uses deviations to generate corrective commands to drive the missile from a position where it is to a position where it isn’t, and arriving at a position where it wasn’t, it now is. Consequently, the position where it is, is now the position that it wasn’t, and it follows that the position that it was, is now the position that it isn’t.
In the event that the position that it is in is not the position that it wasn’t, the system has acquired a variation, the variation being the difference between where the missile is, and where it wasn’t. If variation is considered to be a significant factor, it too may be corrected by the GEA. However, the missile must also know where it was.
The missile guidance computer scenario works as follows. Because a variation has modified some of the information the missile has obtained, it is not sure just where it is. However, it is sure where it isn’t, within reason, and it knows where it was. It now subtracts where it should be from where it wasn’t, or vice-versa, and by differentiating this from the algebraic sum of where it shouldn’t be, and where it was, it is able to obtain the deviation and its variation, which is called error."
boosting the stereotype
This sounds rather dangerous. GPS was originally opened up to civilian use for the purpose of keeping flights on course, after the disaster of Korean Air Flight 007 straying into Soviet airspace and being shot down back in the 1980s.
I can’t understand what is to be gained by deliberately trying to knock civilian airliners off course.
GPS guided drone attacks. Civilian GPS top out at 300 m a second. Anything beyond that is a missile and GPS refuses to work unless you have one of the special government GPS chips without the limiter.
Are you meaning 300 measurements per second? Because civilian gps has an accuracy of ~3 meters. I may be misunderstanding though
The GPS chips have internal limits on how fast they think they can move. If they determine that they are moving faster than 300m/s they will stop outputting any results for a period of time. This limit is, IIRC, put in at the silicon level, so only military chips can bypass it.
If you try to use mapping apps on a plane you sometimes run into this issue.
Would that be relevant for a drone attack? I wouldn’t think a drone that isn’t operated by a state actor is likely to be moving that fast, and presumably a state actor could build their own chips without a limiter?
Thus the point of the spoofing. A drone will be moving much slower than 300 m/s, so spoofing GPS would be an attempt to force it off-course.
Nobody knows what to do?
How they did between 1890 and 1980? Maybe with paper maps and their eyes? It needs investigating!
I don’t know from 1903 to 1980 but from 1890 to 1903 they did not fly at all. The first “modern” flight happened in December 1903.