Final Report of BeJamDetect Project
zn
Vor
23'4 and 24*) were caused by the same type of RFI; and the proximity of the ship to DME/TACAN
stations matches the occurrence of RFI signals with waveforms similar to DME/TACAN signals.
As one of the largest improvements of Demonstrator 3 compared to verion 1, was the GUI provided
insightful results in the format of screenshots taken upon detections of jJamming or spoofing. These
screenshots allow the analyst to assess many parameters visually and simultaneously. The link
between the information from these parameters and from other data (specially position of the ship)
is also insightful to draw conclusions on the likely sources and impact of the interference. In addition
to this advantage, the screenshots can also serve as quidelines for the development of RFl-signals
classification works.
Moreover, the screenshots also demonstrate the potentiallity of the GALANT receiver connected to
a GUI (as it was In Demonstrators 2 and 3) as suitable interference monitoring stations for interested
agencies and enterprises.
Samples of these GUI screenshots are reproduced on Figure 5-12 to Figure 5-15. Screenshots of
strong Interference from different days are reproduced, containing the spectograms, and
consequently the waveform, of the interference signals, the estimation of their direction-of-arrival,
with possible multipaths, and the impact it had on the quality of signals coming from the satellites
in the form of the C/NO0 bar plots.
5.4.1. Examples of RFI events in L1 band
5.4.1.1. Very strong RFI event on October 2
Three RFI events raised the input power over 11 dB wrt. nominal input power. Those three
happened in sequence together with other meaningful RFI events that lasted from 13:16:47 until
"3:18:48 UTC, approximately 2 minutes. They were cause by the same type of interference,
wideband chirp RFI, and came from either southeast or northeast (a case of multipath) from the
heading direction of the ship. Figure 5-12 is the snapshot taken of the strongest signal raising the
oower in 11.8 dB.
In addition to the very high power increase, the interference caused major loss of the satellites, as
visible on the C/NO bar plots. The Jamming flags were active from both Demonstrator 3 side and
from the uBlox side, which is not always the case when the interference is weaker. The spoofing
flag might mean that either that is a spoofing attack precceded by a Jamming signal to make the
‚eceiver lose track of the satellites and acquire the signals from the spoofer, or that the jamming
signal was so strong that leaked through the correlators and was detected as spoofing.
Title: Final Report
Version: 1.0
age: 83