Guardian Positioning System (GPS) for Location Based Services
2025 (English)In: WiSec 2025 - Proceedings of the 18th ACM Conference on Security and Privacy in Wireless and Mobile Networks, Association for Computing Machinery (ACM) , 2025, p. 88-99Conference paper, Published paper (Refereed)
Abstract [en]
Location-based service (LBS) applications proliferate and support transportation, entertainment, and more. Modern mobile platforms, with smartphones being a prominent example, rely on terrestrial and satellite infrastructures (e.g., global navigation satellite system (GNSS) and crowdsourced Wi-Fi, Bluetooth, cellular, and IP databases) for correct positioning. However, they are vulnerable to attacks that manipulate positions to control and undermine LBS functionality-Thus enabling the scamming of users or services. Our work reveals that GNSS spoofing attacks succeed even though smartphones have multiple sources of positioning information. Moreover, that Wi-Fi spoofing attacks with GNSS jamming are surprisingly effective. More concerning is the evidence that sophisticated, coordinated spoofing attacks are highly effective. Attacks can target GNSS in combination with other positioning methods, thus defenses that assume that only GNSS is under attack cannot be effective. More so, resilient GNSS receivers and special-purpose antennas are not feasible on smartphones. To address this gap, we propose an extended receiver autonomous integrity monitoring (RAIM) framework that leverages the readily available, redundant, often so-called opportunistic positioning information on off-The-shelf platforms. We jointly use onboard sensors, terrestrial infrastructures, and GNSS. We show that our extended RAIM framework improves resilience against location spoofing, e.g., achieving a detection accuracy improvement of up to 24-58% compared to the state-of-The-Art algorithms and location providers; detecting attacks within 5 seconds, with a low false positive rate.
Place, publisher, year, edition, pages
Association for Computing Machinery (ACM) , 2025. p. 88-99
Keywords [en]
geolocation apis, localization attacks, secure localization
National Category
Communication Systems Signal Processing Other Electrical Engineering, Electronic Engineering, Information Engineering
Identifiers
URN: urn:nbn:se:kth:diva-369405DOI: 10.1145/3734477.3734707Scopus ID: 2-s2.0-105012088988OAI: oai:DiVA.org:kth-369405DiVA, id: diva2:1995297
Conference
18th ACM Conference on Security and Privacy in Wireless and Mobile Networks, WiSec 2025, Arlington, United States of America, Jun 30 2025 - Jul 3 2025
Note
Part of ISBN 9798400715303
QC 20250904
2025-09-042025-09-042025-09-08Bibliographically approved