Modern field guide to security and privacy

Opinion: Were US sailors 'spoofed' into Iranian waters?

In 2011, Iran spoofed – or faked – Global Positioning System signals to send a CIA drone off course. Did it do the same to trick Navy vessels into Iranian waters? 

|
US Navy handout via Reuters
A riverine patrol boat from Costal Riverine Squadron 2 escorts the guided-missile cruiser USS Bunker Hill (CG 52) while in the Arabia Gulf in this November 15, 2014 handout photo, provided by the U.S. Navy, January 12, 2016. Ten sailors aboard two U.S. Navy riverine patrol boats were seized by Iran in the Gulf on Tuesday, and Tehran told the United State the crew members would be promptly returned, according to U.S. Officials. REUTERS/Mass Communication Specialist 1st Class LaTunya Howard/U.S. Navy/Handout via Reuters

As images of captured American sailors competed with those of the President Obama during the State of the Union address Tuesday, viewers across the world asked: "How could this happen?" The world’s most powerful nation with the most advanced navy had been embarrassed on the same day as the president's speech.

After a series of other implausible explanations, the Department of Defense settled on the explanation that the crews on both boats "misnavigated." That in the middle of their trip between Kuwait and Bahrain the two boats accidentally went more than 50 miles out of their way to venture into Iranian waters.

But were they really that poorly trained and inattentive? Is the navigation equipment in the world’s best navy that poor? And was it just a coincidence it all happened on the day of the president’s address? Or was something much more deliberate – and potentially troubling – to blame?  

Iran has demonstrated in the past that it has the capability – and the will – to exploit a critical and broad vulnerability in our key navigation system – the Global Positioning System, or GPS. In 2011, Iran manipulated GPS systems on a CIA surveillance drone to send it off course and capture it. 

Now, at a time when elements in Iran are feeling their power and prestige diminish after Tehran agreed to the US-led pact to limit the country's nuclear program, the Islamic Republic could once again flex its muscles and show it has the wherewithal to toy with nearby Navy crews. 

And, as the US government is well aware, the GPS network that both drivers and sailors rely on remains vulnerable to attacks. 

Powered by solar panels and some 12,000 miles above the earth, GPS satellites broadcast very weak signals that are easy to block or jam. Over the past few years, illegal jamming by criminals and terrorists trying to hide their whereabouts has become an increasing threat to those signals.

But perhaps more worrisome, GPS signals and receivers can also be spoofed, or faked. This involves the spoofer sending a bogus signal that can fool GPS receivers, allowing the attacker to trick the device into thinking it's in another location.

Iran claims to have used that technique in 2011 to redirect a CIA surveillance drone from Afghanistan. Their claim was credible at the time as they clearly had possession of the undamaged drone.

It became much more credible several months later when Prof. Todd Humphreys and his students at the University of Texas showed how it was done. In a live demonstration in 2013, they took over the navigation system of a large yacht in the Mediterranean.

Now, hackers are even selling spoofing kits. For the 2015 DEF CON hacking conference in Las Vegas, a Chinese researcher sold equipment and published step-by-step instructions for building a spoofing device for about $300. 

The loss of the CIA drone in 2011 should have been a wake-up call for the US military that GPS needs more safeguards. That incident was yet another warning sign that's gone ignored.

But even presidential mandates meant to protect GPS have been ignored over the years. In 1998, President Clinton became concerned about America’s growing reliance on GPS for navigation. He directed the Department of Transportation to study the issue and make recommendations. Those recommendations, which called for improving receivers, developing interference detection networks, and developing non-satellite navigation systems for use alongside GPS, came out just 12 days before 9/11. Most of them, understandably, were tabled. 

Then, in 2004, the Bush administration began to focus on GPS's other functions – providing highly precise timing signals for synchronizing telecommunications and IT networks, financial systems, and power grids. President Bush issued a presidential directive that identified GPS services as essential to the nation’s critical infrastructure, security, and economy. Among its provisions to protect GPS, it directed acquisition of a "back-up system" to serve the nation in the event of a GPS disruption.

President Obama later reaffirmed that directive and has issued several additional presidential orders designed to make the nation’s critical infrastructure more resilient.

The Obama administration has also continued to voice significant concerns about GPS vulnerability. Department of Homeland Security officials have called GPS "a single point of failure for critical infrastructure." Secretary of Defense Ashton Carter has said he wants to "unplug the military from GPS." 

But plans to construct a land-based GPS backup system remain dormant. Studies have shown that, for about $50 million a year, a system known as eLoran could provide a signal more than 1.3 million times stronger than GPS.  And, importantly, the signal is incredibly difficult to jam or
spoof. The deputy secretaries of both the Department of Defense and Department of Transportation have spoken out in favor of such a system. Yet nothing has been done. 

Similar systems are currently being used by Russia, China, South Korea,Britain, Saudi Arabia, and even Iran. 

We may never know what truly led two Navy vessels into Iranian waters – the Iranians confiscated the boat’s GPS navigation suites before they were released. But all the reasons that have been offered to the press seem unlikely. Small Navy vessels like these have multiple and redundant systems, and usually travel in pairs or small groups specifically to avoid having a single point of failure threaten their mission. But the incident is once again an important reminder that GPS as a single point of failure can cause significant problems for America, the least of which are minor embarrassments like this one.

Officials in the Obama administration have said they are going to act and address this problem. Let’s hope that they – and the administration that comes next – follow through on presidential commitments and finally do something to safeguard GPS for everyone.

Dana A. Goward is president of the nonprofit Resilient Navigation and Timing Foundation. He served as the maritime navigation authority for the US working for the US Coast Guard, is retired from the federal Senior Executive Service, and a retired US Coast Guard Captain.

 

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
What is the Monitor difference? Tackling the tough headlines – with humanity. Listening to sources – with respect. Seeing the story that others are missing by reporting what so often gets overlooked: the values that connect us. That’s Monitor reporting – news that changes how you see the world.

Dear Reader,

About a year ago, I happened upon this statement about the Monitor in the Harvard Business Review – under the charming heading of “do things that don’t interest you”:

“Many things that end up” being meaningful, writes social scientist Joseph Grenny, “have come from conference workshops, articles, or online videos that began as a chore and ended with an insight. My work in Kenya, for example, was heavily influenced by a Christian Science Monitor article I had forced myself to read 10 years earlier. Sometimes, we call things ‘boring’ simply because they lie outside the box we are currently in.”

If you were to come up with a punchline to a joke about the Monitor, that would probably be it. We’re seen as being global, fair, insightful, and perhaps a bit too earnest. We’re the bran muffin of journalism.

But you know what? We change lives. And I’m going to argue that we change lives precisely because we force open that too-small box that most human beings think they live in.

The Monitor is a peculiar little publication that’s hard for the world to figure out. We’re run by a church, but we’re not only for church members and we’re not about converting people. We’re known as being fair even as the world becomes as polarized as at any time since the newspaper’s founding in 1908.

We have a mission beyond circulation, we want to bridge divides. We’re about kicking down the door of thought everywhere and saying, “You are bigger and more capable than you realize. And we can prove it.”

If you’re looking for bran muffin journalism, you can subscribe to the Monitor for $15. You’ll get the Monitor Weekly magazine, the Monitor Daily email, and unlimited access to CSMonitor.com.

QR Code to Opinion: Were US sailors 'spoofed' into Iranian waters?
Read this article in
https://www.csmonitor.com/World/Passcode/Passcode-Voices/2016/0115/Opinion-Were-US-sailors-spoofed-into-Iranian-waters
QR Code to Subscription page
Start your subscription today
https://www.csmonitor.com/subscribe