The time spoofing detection method based on Long Short-Term Memory network
-
摘要: 时空信息安全是国家关键基础设施安全的基础,时间系统被阻断或受到干扰会对国家经济带来巨大损失,甚至对国防安全造成重大威胁. 现有授时欺骗检测方法主要对接收机时钟模型变化特点建立模型,对欺骗进行检测. 由于攻击方式的不确定性和建立的接收机时钟模型计算拟合过程中自身存在的系统误差,时钟模型参数准确拟合难度较大. 环境适应能力较低. 基于此,本文提出一种基于长短期记忆网络(long short-term memory,LSTM)的授时欺骗检测方法. 该方法无需考虑授时欺骗的攻击方式,泛化能力强. 根据授时欺骗前后接收机钟差变化的特点,利用LSTM优异的时间序列预测能力对接收机钟差变化趋势进行准确跟踪,实现对授时欺骗干扰的有效检测. 最后使用TEXBAT(texas spoofing test battery)授时欺骗场景数据进行实验与分析,将LSTM与多层感知机(multilayer perceptron,MLP)进行实验对比. 结果表明:LSTM授时欺骗检测的性能优于MLP.
-
关键词:
- 授时欺骗 /
- 机器学习 /
- 长短期记忆网络(LSTM) /
- 欺骗检测 /
- 接收机钟差
Abstract: Temporal and spatial information security is fundamental to the safety of national critical infrastructure. Disruption or interference with the time system can cause significant economic losses to the nation, and even pose a substantial threat to defense security. Existing timing deception detection methods primarily establish models based on the characteristics of changes in the receiver’s clock model to detect deception. However, due to the uncertainty of attack methods and the system errors inherent in the established receiver clock model calculation and fitting process, accurate fitting of the clock model parameters is difficult, and the environmental adaptability is low. To address this, this paper proposes a timing deception detection method based on the Long Short-Term Memory (LSTM) network. This method does not require consideration of the attack methods of timing deception, and has strong generalization capabilities. By utilizing the excellent time series prediction ability of LSTM, the method accurately tracks the trend of changes in receiver clock differences before and after timing deception based on the characteristics of these changes, achieving effective detection of timing deception interference. Finally, experiments and analyses are conducted using TEXBAT (Texas spoofing test battery) timing deception scenario data, and a comparison is made between LSTM and Multilayer Perceptron (MLP) networks. The results indicate that the performance of LSTM timing deception detection is superior to that of MLP.-
Key words:
- spoofing detection /
- LSTM /
- time spoofing /
- machine learning /
- receiver clock deviation
-
表 1 TEXBAT场景数据说明
场景 文件名 欺骗类型 平台移动性 功率/dB 1 DS2 授时欺骗 静态 10 2 DS3 授时欺骗 静态 1.3 3 DS7 授时欺骗 静态 1.0 表 2 检测概率对比
% 检测算法 TEXBAT场景 DS2 DS3 DS7 MLP 74.8 72.6 93.6 LSTM 93.9 92.5 95.1 -
[1] VYSKOCIL P, SEBESTA J. Relative timing characteristics of GPS timing modules for time synchronization application[C]//2009 International Workshop on Satellite and Space Communications, 2009. [2] LI X, XU Q M. A reliable fusion positioning strategy for land vehicles in GPS-denied environments based on low-cost sensors[J]. IEEE transactions on industrial electronics, 2017, 64(4): 3205-3215. DOI: 10.1109/TIE.2016.2637306 [3] KHALAGMEHRABADI A, GATSIS N, AKOPIAN D, et al. Real-time rejection and mitigation of time synchronization attacks on the global positioning system[J]. IEEE transactions on industrial electronics, 2018, 65(8): 6425-6435. DOI: 10.1109/TIE.2017.2787581 [4] LU Q, FENG X Z, ZHOU C. A detection and weakening method for GNSS time-synchronization attacks[J]. IEEE sensors journal, 2021, 21(17): 19069-19077. DOI: 10.1109/JSEN.2021.3088138 [5] 付栋, 彭竞, 马明, 等. 基于钟差检验的GNSS授时欺骗检测与识别[J]. 系统工程与电子技术, 2022, 44(3): 948-955. DOI: 10.12305/j.issn.1001-506X.2022.03.27 [6] LEE J, TAHA A F, GATSIS N, et al. Tuning-free, low memory robust estimator to mitigate GPS spoofing attacks[J]. IEEE control system letters, 2019, 4(1): 145-150. DOI: 10.1109/LCSYS.2019.2922497 [7] 刘洋, 李四海, 付强文, 等. 芯片级原子钟辅助的惯性/卫星组合导航系统欺骗检测方法[J]. 中国惯性技术学报, 2019, 27(5): 654-660. [8] OROUJI N, MOSAVI M RA multi-layer perceptron neural network to mitigate the interference of time synchronization attacks in stationary GPS receivers[J]. GPS solutions, 2021, 25(3): 1-15. DOI: 10.1007/s10291-021-01124-z [9] SHYTERMEJIA E, RAKIPI A, CAKAJ S, et al. Performance impact of ionospheric and tropospheric corrections ofuser position estimation using GPS raw measurements[C]//ICT Innovations, 2014(2013): ICT Innovations and Education, 2014. [10] YUPU W. Research on modeling and prediction of the satellite clock bias and performance evaluation of GNSS satellite clocks[J]. Acta geodaetica et cartographica sinica, 2018, 47(7): 1026. [11] 谢钢. GPS原理与接收机设计[M]. 北京:电子工业出版社: 2017. [12] HUMPHREYS T, BHTTI J , SHEPARD D P, et al. The Texas spoofing test battery: toward a standard for evaluating GPS signal authentication techniques[C]// The 25th International Technical Meeting of the Satellite Division of The Institute of Navigation (ION GNSS 2012), 2012: 3569-3583. DOI: 10.15781/T26D5PT4X