Cyber Security - Avinor

Cyber Security - Avinor
CNS field
Roger Holm
Head Training and Education - CNS
4. februar 2016
Cyber….
CNS challenges in Avinor
•
•
•
•
Our dependency on GPS
GNSS disturbances
Surveillance and Time Stamps
Navigation – Approach & Landing
My Time Stamp
My Time Stamp
My Time Stamp
Relying entirely on GPS
Relying entirely on GPS
Relying entirely on GPS
Strategy
The strategy is to decommission a number of ground based navaids
in favour of the low cost PBN procedures based on GNSS.
Mitigation
If the GNSS fails, and there is no ILS,
the Mitigation is to divert to an alternate airport having either
a PBN procedure or Instrument Landing System.
CNS challenges in Avinor
GPS Dependency
GPS Dependency
GPS Dependency
GPS Dependency
GPS Dependency
Surveillance
Surveillance
At Heidrun oil field there are two GNSS systems:
One system sets the clock and provides the radar data a time stamp.
The second system is PARS (motion compensation system with GPS
and Gyro) and monitors any movement of the platform.
The system is getting Augmentation from the geostationary satelittes
(EGNOS etc).
Surveillance
A problem occured with PARS from Monday, 18th of may 2015 at 6:51
ending at 22nc of may 2015 at 5:07 UTC.
One by one – very slowly - all GPS satellites disappeared from the
receiver.
In the same period there had been no problem or any indication of
problems with the dedicated GPS clock.
So this could not be any ordinary jamming the L1 important frequency.
Surveillance
The problem was traced to PRN125, one of the Geostationary Satellites.
How could a reference signal be corrupt?
Could anyone hack one of these and block or spoof GPS receivers?
Surveillance –Time stamp
Radars are using time stamp that goes with the radar data.
This is very important when used with ARTAS.
Surveillance - Multilateration (MLAT)
Surveillance - Multilateration (MLAT)
Surveillance –Time stamp
Local area MLAT (LAM) calibrates itself using a
fixed 1090 MHz transmitter in a known position.
Wide area Multilateration (WAM)
Surveillance –Time stamp
Multilateration (MLAT) may be implemented instead of Secondary Radar.
Wide area MLAT (WAM) depends on a very exact time stamp.
GNSS is used for that.
Surveillance –Time stamp
If the GPS fails, do we have any reliable alternative?
The GALILEO was promised to be up and running
two years ago with 30 satellites.
In reality we do have less than 10 operating satellites.
The schedule is far behind all plans.
Will it ever be completed?
Surveillance –Time stamp
Again: If the GPS fails, do we have any reliable alternative?
Yes – the eLoran is a well suited ground based precise alternative.
The 4 Loran C stations were switched off on 1st of january 2016!
Now we are REALLY depending on spacecrafts
beyond any national control for all foreseeable future.
Are we aware of that?
GPS disturbances
•
•
•
•
Jamming near the approach path
Detection of violators
Mitigation – how to reduce the cosequences
Regulation
GPS disturbances
There has been a number of reports where the GPS has
been rendered useless for some period of time.
For a CAT III Instrument Landing System, the maximum
acceptable number of non scheduled outages per year is 2.
For a new system this must be carefully tested and verified
over a one year operating time.
Are we confident about that figure for GNSS?
Potential GPS disturbances
GPS disturbances
Detection of disturbances
GPS receiver antenna
will sens any jamming
signal in the area.
App: Architecture og radio
Detection of disturbances
A special receiver is
used to filter out the
jamming signal from
the GPS signal.
u-blox 6 EVK 6P
Detection of disturbances
A special setup is
used for this test.
Rhode & Schwarz EVS 300
Detection of disturbances
A self developed sw
will be used for
«production model».
We get the
magnitude of the
jamming signal.
With jamming signal
Normal GPS signal
Photographing the sources
A given jammer level could
trigger a camera to take a
picture…..
Detection of disturbances
A directional antenna
is used for detecting
the jammers within
the camera angle.
Testing the Detection Circuits
A generator is used
to emulate a jammer
on the L1 frequency
modulated by a wide
spectrum of sidebands to cover the
L1 bandwidth.
Self made jammer.
Violations in GPS disturbances
Regulations should treat jammers and Spoofers
in the same way as using lasers towards
approaching aircrafts.
Detection of disturbances
Or better:
It would be nice to be able
to see the sources like we
can do with GPS and WiFi
sources by this app.
App: Architecture of radio
Detection of disturbances
ILS vs GLS
Localiser Sensitive Area (LSA)
The tailfins produce Localiser (LOC) bends when exiting the RWY
Localiser Sensitive Area (LSA)
Exiting A/C
Localiser Sensitive Area (LSA)
ICAO generic LSA as given in Eurodoc 012
6 nm spacing = 24 ldgs /hr
Computed LSA for the exact LOC type and up to A330/340 size
5 nm spacing = 28 ldgs/hr
LSA at OSL before the change
LSA at OSL after the change
Localiser Sensitive Area (LSA)
NEXT Challenge
4 nm spacing = 34 ldgs/hr
Cyber Security
- Safe landings -