"Segnali Gps sbagliati e strumenti fuori uso: così gli aerei si «perdono» in volo sopra il Medio Oriente"


Giofumagalli

Utente Registrato
19 Febbraio 2017
780
804
Mi sembra strano che in fase di progettazione a nessun ingegnere sia venuto in mente di mettere una regola nei software al fine di scartare input GPS (o di qualsiasi altro sistema) che implicassero velocità prossime a quelle orbitali della Stazione Spaziale Internazionale... 😅
È proprio così infatti:) Tra i vari criteri di accettazione dei segnali GPS ci sono l’integrità e la costanza del segnale.
Il problema nasce dal fatto che -ahimè- quando parliamo di guerra elettronica ci si basa su ciò che già si conosce a livello di tecnologie in uso e se ne progettano altre che possano “bypassare” quanto scoperto fino ad ora. Per chi è appassionato di informatica è un po’ come l’eterno confronto tra IT Security da un lato e gli hacker dall’altro.
 
  • Like
Reactions: BrunoFLR and Fewwy

13947

Utente Registrato
4 Gennaio 2018
326
190
Se non abbiamo il GPS o lo disattiviamo possiamo fare la stessa cosa ma invece di usare appunto il GPS useremo i radioaiuti come DME, VOR o segnali Loc.
Aggiungo una piccola nota.

Con l'utilizzo dei radioaiuti di terra, non si è immuni da spoofing.
Anch'essi possono "ingannare", sia direttamente tramite manomissione della stazione a terra, oppure a distanza, tramite interferenza.
 
  • Like
Reactions: Giofumagalli

Giofumagalli

Utente Registrato
19 Febbraio 2017
780
804
Aggiungo una piccola nota.

Con l'utilizzo dei radioaiuti di terra, non si è immuni da spoofing.
Anch'essi possono "ingannare", sia direttamente tramite manomissione della stazione a terra, oppure a distanza, tramite interferenza.
Assolutamente! Anzi è anche molto più semplice 😣
 

Giofumagalli

Utente Registrato
19 Febbraio 2017
780
804
Per VOR e NDB sicuramente. Anche per il DME?
Guarda per i dettagli tecnici lascio volentieri la parola a chi è più erudito in materia al fine di evitare di dire bestialità a livello ingegneristico 😅
Per quanto mi competa ad esempio lo spoofing dei TACAN si fa da diversi decenni anche con tecnologie degli anni 80.
 

FLRprt

Utente Registrato
17 Novembre 2009
746
561
Guarda per i dettagli tecnici lascio volentieri la parola a chi è più erudito in materia al fine di evitare di dire bestialità a livello ingegneristico 😅
Per quanto mi competa ad esempio lo spoofing dei TACAN si fa da diversi decenni anche con tecnologie degli anni 80.
Grazie
Se si fa spoofing del TACAN, allora penso che valga anche per il DME (che è la parte "distanza" del TACAN).
 
  • Like
Reactions: Giofumagalli

Fewwy

Utente Registrato
19 Agosto 2014
1,599
784
Torino
Aggiornamento.

https://ops.group/blog/gps-spoofing-update-08nov2023/

GPS Spoofing Update: Map, Scenarios and Guidance
Key points in this update
  • Two new types of GPS spoofing being reported, one leading to new critical nav failures
  • Three distinct scenarios (Baghdad, Cairo, and Beirut types) – Spoofing Map published
  • ALL CALL summary available in your Dashboard
It’s been 5 weeks since the real-world discovery of a fundamental flaw in avionics design: If a GPS position signal is faked, most aircraft are incapable of detecting the ruse. For many, it has lead to total navigation failure. For others, it has led to subtle and undetected erroneous tracking.

In the worst cases, the impact has been severe: complete loss of on-board nav requiring ATC vectors, IRS failure, and unnoticed off-track navigation towards danger areas and hostile airspace. The industry has been slow to come to terms with the issue, leaving flight crews alone to find ways of detecting and mitigating GPS spoofing.

Two entirely new types of GPS spoofing have been reported in other areas since the first GPS Spoofing report we published on 26 September. These include critical nav failures on departure from Tel Aviv leading aircraft towards Lebanon, and spoofed signals received by multiple aircraft in the Cairo FIR showing a stationary position over LLBG. We have now identified three distinct spoofing scenarios, shown on the map below and detailed in this briefing.

On Friday last, we asked OPSGROUP members for a group ALL CALL to gather the latest intel that we have in the community. This article will summarize at high level what we know.

Three scenarios: different types of spoofing
The GPS Spoofing reports received by OPSGROUP can be divided into three main scenarios, which correspond to the areas on the map below.



Key Flight Crew concerns
  • Uncertainty as to the best way to mitigate GPS spoofing activity
  • Wide concern over IRS spoofing, previously thought to be impossible
  • Potential for the issue to recur in other geographic areas
  • Potential for surprise and startle effect with sudden loss of nav capability
  • Lack of useful guidance from aviation authorities, OEM’s and avionics manufacturers
Worst case reports
In all, OPSGROUP has received close to 50 reports of GPS spoofing activity. Further down, we identify three distinct spoofing scenarios reported by flight crew. First, we highlight the most troubling reports to show how critical the impact can be.
  • A Gulfstream G650 experienced full nav failure on departure from LLBG/Tel Aviv (25 Oct). The crew reports, “ATC advised we were off course and provided vectors. Within a few minutes our EPU was 99.0, FMS, IRS, and GPS position were unreliable. The navigation system thought it was 225nm south of our present position.”
  • A Bombardier Global Express was spoofed on departure from LLBG/Tel Aviv (16 Oct). A false GPS position showed position as overhead OLBA/Beirut. Crew advises “The controller warned us that we are flying towards a forbidden area”.
  • A Boeing 777 experienced a 30 minute GPS spoofing encounter in the Cairo FIR (16 Oct). A false GPS position showed the aircraft as stationary overhead LLBG for 30 minutes.
  • A Bombardier Global 7500 was spoofed 3 separate times in the Cairo FIR (16 Oct 2023). Crew advises: “The first took out one GPS, the second took out a GPS and all 3 IRS’s, and the third time took both GPS’s and all 3 IRS’s.” The distance from LLBG was roughly 220-250 miles, and the spoofing stopped once we were approx 250nm west of LLBG.
  • An Embraer Legacy 650 enroute from Europe to Dubai. They tell us, “In Baghdad airspace, we lost both GPS in the aircraft and on both iPads. Further, the IRS didn’t work anymore. We only realized there was an issue because the autopilot started turning to the left and right, so it it was obvious that something was wrong. After couple of minutes we got error messages on our FMS regarding GPS, etc. So we had to request radar vectors. We were showing about 80 nm off track. During the event, we nearly entered Iran airspace (OIIX/Tehran FIR) with no clearance.
  • A Bombardier Challenger 604 experienced spoofing in the Baghdad FIR and required vectors all the way to Doha. “Nearing north of Baghdad something happened where we must have been spoofed. We lost anything related to Nav and the IRS suggested we had drifted by 70-90 miles. We had a ground speed of zero and the aircraft calculated 250kts of wind. The FMS’s reverted to DR (Dead Reckoning) and had no idea where they were.We initially took vectors to get around the corner at SISIN. Nav capability was never restored, so we required vectors all the way from Iraq to Doha for an ILS. We never got our GPS sensors back until we fired up the plane and went back to home base two days later.
Scenario 1: Baghdad type.
Affected area:
Primarily Northern Baghdad FIR, especially on airway UM688. Also, northern Tehran FIR, Baku FIR



The Baghdad spoofing type involves GPS spoofing of enroute aircraft, nav failures follow. This was the first type of spoofing, initially reported on August 29, 2023, with a large amount of further reports starting in September 2023.

Scenario 2: Cairo type
Affected area:
Primarily within the Cairo FIR (L560, and locations near CVO VOR), also Nicosia FIR (Cyprus), Amman FIR (Jordan)

These reports first surfaced around Oct 16. Most reports are within the Cairo FIR. All crew reported similar circumstances, where a false or spoofed GPS position is received by the aircraft, incorrectly showing the aircraft position as being over LLBG/Tel Aviv. Locations vary from airways over the eastern Mediterranean, Egypt, and also on approach into Amman, Jordan (OJAM). Reports range from 100nm to as far as 212nm from LLBG.

Scenario 3: Beirut type.
Affected area:
Primarily within the Tel Aviv FIR, also Nicosia FIR (Cyprus), Amman FIR (Jordan)

Here, the spoofed position shows the aircraft over OLBA/Beirut, or creates subtle tracking towards OLBA. This type has been responsible for wayward tracking on SID departures from LLBG since October 25.



How to identify spoofing
The big question for flight crew is: how do I know this is happening to us? As always, we are in the front line of dealing with this. What will you do at 2am over the Middle East when the aircraft starts drifting off course and saying “Position Uncertain”? With almost zero guidance, we’re largely on our own to figure things out.

The following are based on the reports submitted to OPSGROUP by crews that have experienced spoofing:

1. Sudden increase in EPU (Estimated Position Uncertainty). GPS jamming will not create this, but a spoofed position will cause a “jump” and hence EPU values have jumped from 0.1nm to 60nm, and >99nm in quick order.
2. An EFIS warning relating to Nav. Some aircraft have gone straight to “DR” mode (Dead Reckoning).
3. A sudden large change in the aircraft clock UTC time. Reports vary from a couple of hours to 8 hour and 12 hour changes in the aircraft clock time.

Obviously, every aircraft has different system architecture and will behave differently, but these tell-tale indicators should help to identify the first signs of spoofing.

Mitigation – BEFORE entering known areas

At base level, there is no effective way to prevent the actual GPS spoofing from happening. If it exists, a false signal will be received by the aircraft. As mentioned above, most aircraft are not able to understand that this is happening – there is no software logic that detects large sudden jumps in GPS position as being potentially false.

1. The critical first step is knowing when you are entering a potential GPS spoofing area (see locations above)
2. Consider de-selecting GPS as a sensor input to the FMS (to avoid nav uncertainty)
3. Consider, if possible, de-selecting GPS updating to the IRS (to avoid loss of IRS)
4. Monitor ATC for any other aircraft comments that indicate spoofing (time checks, position checks)
5. Identify conventional navaids that can be used instead (VOR, NDB)
6. Departure – there is uncertainty as to whether de-selecting GPS inputs on the ground before departure into known spoofing areas is sensible. Some OEM’s have said this may lead to other issues

Mitigation – DURING active spoofing

If you experience GPS spoofing

1. As soon as possible, de-select any GPS inputs (FMS, IRS). Crew reports suggest that quick action here (within 60 seconds) can prevent wider nav failure
2. Switch to using conventional navaids (VOR, NDB)
3. If you know that for your aircraft type the IRS is not capable of being spoofed, obviously IRS navigation is preferable for accuracy
4. Report the occurance to ATC, primarily to warn other flight crew on the same frequency
 
  • Like
Reactions: Giofumagalli

Seaking

Moderatore
Utente Registrato
1 Febbraio 2012
12,503
2,640
Beh, ma credo qui si tratti solo di jamming e non di spoofing.
Tra i due, forse è meglio il primo, almeno sei privo di segnale e te ne fai una ragione. Cosa ben diversa dall'avere un segnale alterato che ti fa credere di essere dove non sei.
 

OneShot

Utente Registrato
31 Dicembre 2015
3,985
3,180
Paris
Beh, ma credo qui si tratti solo di jamming e non di spoofing.
Tra i due, forse è meglio il primo, almeno sei privo di segnale e te ne fai una ragione. Cosa ben diversa dall'avere un segnale alterato che ti fa credere di essere dove non sei.
D’accordissimo.