This paper provides a methodology to study the PHY layer vulnerability of wireless protocols in hostile radio environments. Our approach is based on testing the vulnerabilities of a system by analyzing the individual subsystems. By targeting an individual subsystem or a combination of subsystems at a time, we can infer the weakest part and revise it to improve the overall system performance. We apply our methodology to 4G LTE downlink by considering each control channel as a subsystem. We also develop open-source software enabling research and education using software-defined radios. We present experimental results with open-source LTE systems and shows how the different subsystems behave under targeted interference. The analysis for the LTE downlink shows that the synchronization signals (PSS/SSS) are very resilient to interference, whereas the downlink pilots or Cell-Specific Reference signals (CRS) are the most susceptible to a synchronized protocol-aware interferer. We also analyze the severity of control channel attacks for different LTE configurations. Our methodology and tools allow rapid evaluation of the PHY layer reliability in harsh signaling environments, which is an asset to improve current standards and develop new and robust wireless protocols.
more »
« less
Performance Analysis of a Mission-Critical Portable LTE System in Targeted RF Interference
Mission-critical wireless networks are being upgraded to 4G long-term evolution (LTE). As opposed to capacity, these networks require very high reliability and security as well as easy deployment and operation in the field. Wireless communication systems have been vulnerable to jamming, spoofing and other radio frequency attacks since the early days of analog systems. Although wireless systems have evolved, important security and reliability concerns still exist. This paper presents our methodology and results for testing 4G LTE operating in harsh signaling environments. We use software-defined radio technology and open-source software to develop a fully configurable protocol-aware interference waveform. We define several test cases that target the entire LTE signal or part of it to evaluate the performance of a mission-critical production LTE system. Our experimental results show that synchronization signal interference in LTE causes significant throughput degradation at low interference power. By dynamically evaluating the performance measurement counters, the k-nearest neighbor classification method can detect the specific RF signaling attack to aid in effective mitigation.
more »
« less
- Award ID(s):
- 1642873
- NSF-PAR ID:
- 10042949
- Date Published:
- Journal Name:
- IEEE Vehicular Technology Conference (VTC) Fall, 2017
- Format(s):
- Medium: X
- Sponsoring Org:
- National Science Foundation
More Like this
-
-
Cellular networks with D2D links are increasingly being explored for mission-critical applications (e.g., real-time control and AR/VR) which require predictable communication reliability. Thus it is critical to control interference among concurrent transmissions in a predictable manner to ensure the required communication reliability. To this end, we propose a Unified Cellular Scheduling (UCS) framework that, based on the Physical-Ratio-K (PRK) interference model, schedules uplink, downlink, and D2D transmissions in a unified manner to ensure predictable communication reliability while maximizing channel spatial reuse. UCS also provides a simple, effective approach to mode selection that maximizes the communication capacity for each involved communication pair. UCS effectively uses multiple channels for high throughput as well as resilience to channel fading and external interference. Leveraging the availability of base stations (BSes) as well as high-speed, out-of-band connectivity between BSes, UCS effectively orchestrates the functionalities of BSes and user equipment (UE) for light-weight control signaling and ease of incremental deployment and integration with existing cellular standards. We have implemented UCS using the open-source, standards-compliant cellular networking platform OpenAirInterface, and we have validated the UCS design and implementation using the USRP B210 software-defined radios in the ORBIT wireless testbed. We have also evaluated UCS through high-fidelity, at-scale simulation studies; we observe that UCS ensures predictable communication reliability while achieving a higher channel spatial reuse rate than existing mechanisms, and that the distributed UCS framework enables a channel spatial reuse rate statistically equal to that in the state-of-the-art centralized scheduling algorithm iOrder.more » « less
-
A reliable command and control (C2) data link is required for unmanned aircraft systems (UAS) operations in order to monitor the status and support the control of UAS. A practical realization of the C2 communication and mission data links for commercial UAS operations is via LTE/5G networks. While the trajectory of each UAS directly determines the flight distance and mission cost in terms of energy dissipation, it also has a strong correlation to the quality of the communication link provided by a serving base station, where quality is defined as the achieved signal-to-interference-plus-noise ratio (SINR) required to maintain the control link of the UAS. Due to signal interference and the use of RF spectrum resources, the trajectory of a UAS not only determines the communication link quality it will encounter, but also influences the link quality of other UAS in its vicinity. Therefore, effective UAS traffic management must plan the trajectory for a group of UAS taking into account the impact to the interference levels of other base stations and UAS communication links. In this paper, an SINR Aware Predictive Planning (SAPP) framework is presented for trajectory planning of UAS leveraging 4G/5G communication networks in a simulated environment. The goal is to minimize flight distance while ensuring a minimum required link quality for C2 communications between UAS and base stations. The predictive control approach is proposed to address the challenges of the time varying SINR caused by the interference from other UAS’s communication. Experimental results show that the SAPP framework provides more than 3dB improvements on average for UAS communication parameters compared to traditional trajectory planning algorithms while still achieving shortest path trajectories and collision avoidance.more » « less
-
null (Ed.)Using ideas from Chu and Bode/Fano theories, we characterize the maximum achievable rate over the single-input single-output wireless communication channels under a restriction on the antenna size at the receiver. By employing circuit-theoretic multiport models for radio communication systems, we derive the information-theoretic limits of compact antennas. We first describe an equivalent Chu’s antenna circuit under the physical realizability conditions of its reflection coefficient. Such a design allows us to subsequently compute the achievable rate for a given receive antenna size thereby providing a physical bound on the system performance that we compare to the standard size-unconstrained Shannon capacity. We also determine the effective signal-to-noise ratio (SNR) which strongly depends on the antenna size and experiences an apparent finite-size performance degradation where only a fraction of Shannon capacity can be achieved. We further determine the optimal signaling bandwidth which shows that impedance matching is essential in both narrowband and broadband scenarios. We also examine the achievable rate in presence of interference showing that the size constraint is immaterial in interference-limited scenarios. Finally, our numerical results of the derived achievable rate as function of the antenna size and the SNR reveal new insights for the physically consistent design of radio systems.more » « less
-
The long-term evolution (LTE) has spread around the globe for deploying 4G cellular networks for com-mercial use. These days, it is gaining interest for new applica-tions where mobile broadband services can be of benefit to so-ciety. Whereas the basic concepts of LTE are well understood, its long-term evolution has just started. New areas of R&D look into operation in unlicensed and shared bands, where new ver-sions of LTE need to coexist with other communication systems and radars. Virginia Tech has developed an LTE testbed with unique features to spur LTE research and education. This pa-per introduces Virginia Tech’s LTE testbed, its main features and components, access and configuration mechanisms, and some of the research thrusts that it enables. It is unique in sev-eral aspects, including the extensive use of software-defined radio technology, the combination of industry-grade hardware and software-based systems, and the remote access feature for user-defined configurations of experiments and radio frequency paths.more » « less
- Free Publicly Accessible Full Text
-
Accepted Manuscript1.0
- Conference Paper:
- The DOI is not currently available.
