王文益, 侯迎龙, 史文浩. 基于SQM相关性的GNSS诱导式欺骗检测[J]. 信号处理, 2024, 40(9): 1748-1760. DOI: 10.12466/xhcl.2024.09.016.
引用本文: 王文益, 侯迎龙, 史文浩. 基于SQM相关性的GNSS诱导式欺骗检测[J]. 信号处理, 2024, 40(9): 1748-1760. DOI: 10.12466/xhcl.2024.09.016.
WANG Wenyi, HOU Yinglong, SHI Wenhao. GNSS-induced spoofing detection based on SQM cor‐relation[J]. Journal of Signal Processing, 2024, 40(9): 1748-1760. DOI: 10.12466/xhcl.2024.09.016.
Citation: WANG Wenyi, HOU Yinglong, SHI Wenhao. GNSS-induced spoofing detection based on SQM cor‐relation[J]. Journal of Signal Processing, 2024, 40(9): 1748-1760. DOI: 10.12466/xhcl.2024.09.016.

基于SQM相关性的GNSS诱导式欺骗检测

GNSS-induced Spoofing Detection Based on SQM Correlation

  • 摘要: 最初设计用于多径检测的信号质量监测(Signal Quality Monitoring,SQM)技术已被证明可用于识别欺骗攻击,具有简单结构和良好可行性,但是它容易受到噪声的影响,检测性能会明显下降。改进后的SQM的移动方差(Moving Variance,MV)和移动均值(Moving Average, MA)技术可以减少噪声的影响,增强SQM技术的欺骗检测能力,但是它们未考虑多颗卫星之间的联系。因此,本文利用多颗卫星之间的关联提出了一种新的增强 SQM技术来检测欺骗,可适用于更多的欺骗环境。众所周知,诱导式欺骗干扰同时攻击多颗卫星,而各颗卫星受到的诱导过程具有相似的特性,导致各颗卫星的跟踪环路中自相关函数(autocorrelation function, ACF)有着相似的畸变趋势,进而不同卫星间SQM幅值的变化是相似的。由于度量的相关性可以更好地反映这种相似性,本文将多颗卫星间SQM度量的相关性(correlation,Corr)作为检测欺骗发生的新度量。最后,推导了新算法的基本原理,证明了新度量服从高斯分布,然后,根据推导出的概率密度函数,给出了新算法的最优检测阈值。它的欺骗检测能力已经使用美国德州大学的欺骗数据集(Texas Spoofing Test Battery,TEXBAT)进行了验证,并与SQM的MV和MA进行了比较。结果表明,所提出的基于Corr的SQM方法在检测诱导式欺骗攻击方面是更有效的。

     

    Abstract: ‍ ‍The originally designed Signal Quality Monitoring (SQM) technology for multipath detection has been effective in identifying spoofing attacks for the Global Navigation Satellite System (GNSS). Traditional SQM techniques directly use amplitude metrics to monitor spoofing attacks, and they have simple structures and good feasibility. However, they are susceptible to noise, resulting in a significant decrease in detection performance. The improved SQM technique, incorporating the Moving Variance (MV) and Moving Average (MA), reduces the impact of noise and enhances the spoofing detection capability of SQM. Nevertheless, these techniques do not consider the correlation among multiple satellites. Therefore, this paper proposes a novel enhanced SQM technique that utilizes the inter-satellite correlation to detect spoofing, making it applicable in various spoofing environments. Inducing spoofing interference is widely considered to simultaneously attack multiple satellites, and each satellite undergoes an induced process. Moreover, the induction process of each satellite exhibits similar characteristics, resulting in similar distortions in the autocorrelation function (ACF) of multiple satellite tracking loops. Consequently, the variations in the SQM amplitude among different satellites are similar. Owing to the improved reflection of similarity through metric correlation, this paper introduces the correlation (Corr) of SQM metrics among multiple satellites as a novel measure for detecting spoofing occurrences. First, this article proposes an algorithm that utilizes the similarity in the induced spoofing process among multiple satellites, instead of treating spoofing attacks solely from the perspective of a single satellite. Second, a theoretical analysis shows that the new metric follows a Gaussian distribution in the absence of spoofing. The Neyman-Pearson (NP) hypothesis testing method is used to determine the optimal detection threshold, which determines whether the target receiver is being spoofed. Finally, the spoofing detection capability of the new method is validated using the Texas Spoofing Test Battery (TEXBAT) and compared with the MV and MA of SQM. The results indicate that the SQM method based on Corr can detect GNSS-induced spoofing attacks more effectively.

     

/

返回文章
返回