GNSS SpAmming: a spoofing-based GNSS denial-of-service attack

• URL: http://arxiv.org/abs/2602.05517v1
• Date: Thu, 05 Feb 2026 10:20:50 GMT
• Title: GNSS SpAmming: a spoofing-based GNSS denial-of-service attack
• Authors: Sergio Angulo Cosín, Javier Junquera-Sánchez, Carlos Hernando-Ramiro, José-Antonio Gómez-Sánchez,
• Abstract summary: New type of attack: SpAmming, which combines both approaches to achieve the same effects in a more subtle way.<n>Exploiting the CDMA multiplexing present in mostNMAs, and through a spoofing attack, this approach leads the receiver to lose access to the signal of a legitimate satellite.<n>An experimental proof-of-concept is presented in which its impact is evaluated as a function of the previous state of the receiver.
• Score: 4.718865306844715
• License: http://creativecommons.org/licenses/by-nc-nd/4.0/
• Abstract: GNSSs are vulnerable to attacks of two kinds: jamming (i.e. denying access to the signal) and spoofing (i.e. impersonating a legitimate satellite). These attacks have been extensively studied, and we have a myriad of countermeasures to mitigate them. In this paper we expose a new type of attack: SpAmming, which combines both approaches to achieve the same effects in a more subtle way. Exploiting the CDMA multiplexing present in most GNSSs, and through a spoofing attack, this approach leads the receiver to lose access to the signal of a legitimate satellite, which would be equivalent to a denial of service; but in this case the existing countermeasures against jamming or spoofing would not allow safeguarding its effectiveness, as it is neither of them. An experimental proof-of-concept is presented in which its impact is evaluated as a function of the previous state of the receiver. Using an SDR-based system developed at the Space Security Centre, the attack is executed against a cold-started receiver, a warm-started receiver, and a receiver that has already acquired the PVT solution and is navigating. Different attack configurations are also tested, starting from a raw emission of the false signal, to surgical Doppler effect configuration, code offset, etc. Although it is shown to be particularly successful against cold-started receivers, the results show that it is also effective in other scenarios, especially if accompanied by other attacks. We will conclude the article by outlining possible countermeasures to detect and, eventually, counteract it; and possible avenues of research to better understand its impact, especially for authenticated services such as OSNMA, and to characterize it in order to improve the response to similar attacks.

Related papers

• Quantum-Classical Hybrid Framework for Zero-Day Time-Push GNSS Spoofing Detection [8.560939383123657]
  We develop a zero-day spoofing detection method using a Hybrid Quantum-Classical Autoencoder (HQC-AE)<n>We focus on spoofing detection in static receivers, where attackers manipulate timing information to induce incorrect time computations at the receiver.<n>Our analysis demonstrates that the HQC-AE consistently outperforms its classical counterpart, traditional supervised learning-based models, and existing unsupervised learning-based methods.
  arXiv  Detail & Related papers  (2025-08-25T14:46:22Z)
• Generative Adversarial Evasion and Out-of-Distribution Detection for UAV Cyber-Attacks [6.956559003734227]
  This paper introduces a conditional generative adversarial network (cGAN)-based framework for crafting stealthy adversarial attacks that evade IDS mechanisms.<n>Our findings emphasize the importance of advanced probabilistic modeling to strengthen IDS capabilities against adaptive, generative-model-based cyber intrusions.
  arXiv  Detail & Related papers  (2025-06-26T10:56:34Z)
• SATversary: Adversarial Attacks on Satellite Fingerprinting [14.683336638975762]
  transmitter fingerprinting provides mechanisms by which communication can be authenticated.<n>We show that an optimized jamming signal can cause a 50% error rate with attacker-to-victim ratios as low as -30dB.<n>We also present a data poisoning attack, enabling persistent message spoofing by altering the data used to authenticate incoming messages to include the attacker's transmitter.
  arXiv  Detail & Related papers  (2025-06-06T14:27:19Z)
• Practical Spoofing Attacks on Galileo Open Service Navigation Message Authentication [22.4706805281638]
  This paper examines the Galileo Open Service Navigation Message Authentication (OSNMA)<n>It discovers two critical vulnerabilities, namely artificially-manipulated time synchronization (ATS) and interruptible message authentication (IMA)
  arXiv  Detail & Related papers  (2025-01-16T02:16:53Z)
• AdvQDet: Detecting Query-Based Adversarial Attacks with Adversarial Contrastive Prompt Tuning [93.77763753231338]
  Adversarial Contrastive Prompt Tuning (ACPT) is proposed to fine-tune the CLIP image encoder to extract similar embeddings for any two intermediate adversarial queries. We show that ACPT can detect 7 state-of-the-art query-based attacks with $>99%$ detection rate within 5 shots. We also show that ACPT is robust to 3 types of adaptive attacks.
  arXiv  Detail & Related papers  (2024-08-04T09:53:50Z)
• Rethinking Targeted Adversarial Attacks For Neural Machine Translation [56.10484905098989]
  This paper presents a new setting for NMT targeted adversarial attacks that could lead to reliable attacking results. Under the new setting, it then proposes a Targeted Word Gradient adversarial Attack (TWGA) method to craft adversarial examples. Experimental results demonstrate that our proposed setting could provide faithful attacking results for targeted adversarial attacks on NMT systems.
  arXiv  Detail & Related papers  (2024-07-07T10:16:06Z)
• Experimental Validation of Sensor Fusion-based GNSS Spoofing Attack Detection Framework for Autonomous Vehicles [5.624009710240032]
  We present a sensor fusion-based spoofing attack detection framework for Autonomous Vehicles. Experiments are conducted in Tuscaloosa, AL, mimicking urban road structures. Results demonstrate the framework's ability to detect various sophisticated spoofing attacks, even including slow drifting attacks.
  arXiv  Detail & Related papers  (2024-01-02T17:30:46Z)
• DALA: A Distribution-Aware LoRA-Based Adversarial Attack against Language Models [64.79319733514266]
  Adversarial attacks can introduce subtle perturbations to input data. Recent attack methods can achieve a relatively high attack success rate (ASR) We propose a Distribution-Aware LoRA-based Adversarial Attack (DALA) method.
  arXiv  Detail & Related papers  (2023-11-14T23:43:47Z)
• Improving the Adversarial Robustness for Speaker Verification by Self-Supervised Learning [95.60856995067083]
  This work is among the first to perform adversarial defense for ASV without knowing the specific attack algorithms. We propose to perform adversarial defense from two perspectives: 1) adversarial perturbation purification and 2) adversarial perturbation detection. Experimental results show that our detection module effectively shields the ASV by detecting adversarial samples with an accuracy of around 80%.
  arXiv  Detail & Related papers  (2021-06-01T07:10:54Z)
• Investigating Robustness of Adversarial Samples Detection for Automatic Speaker Verification [78.51092318750102]
  This work proposes to defend ASV systems against adversarial attacks with a separate detection network. A VGG-like binary classification detector is introduced and demonstrated to be effective on detecting adversarial samples.
  arXiv  Detail & Related papers  (2020-06-11T04:31:56Z)
• Defense for Black-box Attacks on Anti-spoofing Models by Self-Supervised Learning [71.17774313301753]
  We explore the robustness of self-supervised learned high-level representations by using them in the defense against adversarial attacks. Experimental results on the ASVspoof 2019 dataset demonstrate that high-level representations extracted by Mockingjay can prevent the transferability of adversarial examples.
  arXiv  Detail & Related papers  (2020-06-05T03:03:06Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.