dfm covers
 
 

Dangers in GNSS Spoofing

Written by DFM Team


Dangers in GNSS Spoofing

In Digital Forensics Magazine Issue 18 we reported extended research on the accuracies of GNSSs (Global Satellite Positioning Systems) and the implications for evidential use. The major concern was that the variability of GNSS data over time, locations, and environments, was sufficient to cast doubt on the factuality of space-time claims. The implications from the research report suggested that the presentation of GNSS evidence in court rooms required further validation testing against a simple set of assertions before acceptance. In more recent years plentiful anecdotal evidence has arisen suggesting that invalidated map data in GNSS can be unacceptably incorrect and erroneous. For example, the story of the student leaving his backpackers accommodation late one evening in Amsterdam looking for the nearest coffee shop, and following his mobile phone GNSS application for directions, fell into a canal because his map was inaccurate. My wife had a similar experience while driving a late model vehicle in which the GNSS displayed the vehicle moving on open fields and in rivers when in fact she was driving at 100 km/hr on a new six lane motorway, and obviously on an older version of map software. These examples underwrite the indeterminacy of evidence taken from GNSS, and the necessity of evidence audit and validation. However, more recent research and published cases suggest that sinister anti-forensic activities are being perpetrated through a multiplicity of GNSS vulnerabilities. These include the planting of anti-forensic data in GNSS units, the physical exercise of units to record anti-forensic data, and the compromise of GNSS units for anti-forensic purposes. The signals themselves that a GNSS relies upon for timing or positioning can be spoofed to create an anti-forensic opportunity or to deceive the user of the device into unplanned actions. Two high profile examples of deception have been the capturing of military drones by allegedly GNSS signal spoofing, and the breach of territorial jurisdiction by naval vessels that apparently unknowingly went off course and were legitimately arrested. Such dependency upon the GNSS for critical decisions warrants an independent arbitrator for validation.

Find out more - subscribe to DFM today and read the full article. Or if you're a subscriber, login and read the article online.


 
Please make cache directory writable.
 

Submit an Article

Call for Articles

We are keen to publish new articles from all aspects of digital forensics. Click to contact us with your completed article or article ideas.

Featured Book

Learning iOS Forensics

A practical hands-on guide to acquire and analyse iOS devices with the latest forensic techniques and tools.

Meet the Authors

Angus Marshall

Angus Marshall is an independent digital forensic practitioner, author and researcher

 

Coming up in the Next issue of Digital Forensics Magazine

Coming up in Issue 34 on sale from February 2018:


Device Forensics in the Internet of Things

As more businesses and consumers adopt IoT devices, privacy violations and cyber-attacks by malicious actors will become commonplace due to the insecure IoT infrastructure. Read More »

Data Destruction In Current Hard Disks & Data Destruction Techniques

Data destruction is a process traditionally applied using physical techniques, aiming at the completely destruction of the hard disk, however, there is an increasing interest in the use of logical techniques for data destruction, that allow reusing the physical device. Read More »

Subscribe today


Faster Searching For Known Illegal Content

Cryptographic (“MD5”) hash searching for known illegal material is one of the most thorough methods of digital forensic investigation. However, the technique is hampered by the ever-increasing size of media being examined, and the size of the hash list being searched. Read More »

Every Issue
Plus the usual Competition, Book Reviews, 360, IRQ, Legal

Click here to read more about the next issue