sanitized-impact of em attack signatures on etcs quality ... · pdf fileon etcs quality of...

14
Impact of EM a,ack signatures on ETCS Quality of Service Indicators Marina AGUADO, UPV/EHU ChrisHan PINEDO, UPV/EHU Eduardo JACOB, UPV/EHU

Upload: nguyenminh

Post on 11-Mar-2018

222 views

Category:

Documents


5 download

TRANSCRIPT

ImpactofEMa,acksignaturesonETCSQualityofServiceIndicators

MarinaAGUADO,UPV/EHUChrisHanPINEDO,UPV/EHUEduardoJACOB,UPV/EHU

EMA%acksignaturesonCommunica4onSystems

Assesstheimpactofthejammersontheapplica4onlevelandnotonlyonthephysicallayer.

v  ApplicaHonconsidered:ETCScommunicaHonbetweenthetrainandtheRBCforERTMSlevel2andlevel3.

2

Goal

InterferencesintheCommunicaHonArchitecture

RailwayNetworkAvailability

GOAL

Performsimula4onsandcorrelateresultsinordertoiden4fynetworkmeasures(packetloss,delay,…)thatcouldbeusedasanaddi4onalsensortodetectabnormalbehaviourora%acks.

3

Goal(cont.)

Railway

IntegratedSimulaHonFramework

INPUT OUTPUT PacketerrorrateConnecHonEstablishmentEndtoenddelay

EIRENE or QoS KPI´s Health Attack Manager

FailureorJammersCharacteriza4on

ERTMS

ETCSApplication

Open Communication system GSM-R

ETCSApplication

Open Communication system GSM-R

GSM-R radio transmission

ETCS application protocol

Radio protocol

Train-Side Track-Side

ETCSApplication

Open Communication system GSM-R

ETCSApplication

Open Communication system GSM-R

GSM-R radio transmission

ETCS application protocol

Radio protocol

Train-Side Track-Side

ERTMS=FuncHonalSubsystem+TelecomSubsystem

**CHALLENGE=ModellingbothSubsystems(FuncHonalSubsystem+TelecomSubsystem)inthesamesimulaHonintegratedframework

SimulaHonFramework

RailwayNetworkInforma4on(TrainProgram)

NumberoftrainsRBC

BaliselocaHonTerrainInformaHon

Communica4onNetwork

TopologyPropagaHonModel

+FailureorJammers

Characteriza4on

Railway

IntegratedSimulaHonFramework

INPUT OUTPUT PacketerrorrateConnecHonEstablishmentDelayEndtoenddelay

Interferred Scenario Analysis in Simulation Platform

EIRENE or QoS KPI´s

UnnecessaryEmergencyBrakes

Availability

Health Attack Manager

n  DemoPresenta4on:w  Scenario1:Legacyarchitecturew  Scenario2:NextGenera4onIP–LTEwithfailuresw  Scenario3–Conges4on

SimulaHonFramework

FurtherdetailonSimulaHonFrameworkinternals:•  ModellingandsimulaHonofERTMSforcurrentandfuturemobiletechnologies.Interna4onalJournalofVehicularTechnology(2015)•  Towardszeroon-sitetesHng:Advancedtrafficmanagement&controlsystemssimulaHonframeworkincluding

communicaHonKPIsandresponsetofailureevents.InWirelessVehicularCommunica4ons(WiVeC)2014IEEEVehicularTechnologyCommunica4onConference

7

SimulaHonFramework

8

SimulaHonScenario

v  Access-Networkv  MainfuncHon:Forwardpacketsbetween

wirelessandwiredinterfacesv  EquivalenttoaBTSofGSM-R.v  TransmissionPowersettoprovidebetween

-95dBmand-93dBmat3kmaccordingtofieldmeasures(4,27mW).

v  Core-Networkv  MainfuncHon:Forwardpackets

betweentheRBCandantennas.

6km10m

102km

Modelledthenormalcondi4onsforaend-to-end(train-to-ground)link

9

SimulaHonScenarioDetailonETCSdevices

ModelledETCS(ATP)applica4onandlowerlayerprotocols

10

SimulaHonFramework:Jammers

Modelledasasinglebandjammerof4MHzcentredinthe923MHzfrequencywithacyclictransmissionpowerof8usecbetween-5dBmand7,5dBm.Thus,itonlyaffectsdownlinkGSM-Rchannels.

Modelledasajammerwithaconstantoutputpowerof-10dBminthe840-976MHzfrequencyband.Thus,itaffectsuplinkanddownlinkGSM-Rchannels.

RealGreyJammer

RealSilverJa

mmer

ModelledSilverandG

reyJam

mers

11

TestMethodology

v  Parameterizenetworkv  Focusgeographical

scopetotwoBTSs(6km)

v  Selectthejammer.v  Twojammersmodelled

v  LocatetheJammerv  MiddleoftwoBTSsv  ClosetooneBTSv  InthesamelocaHonofone

BTS

v  Every25metersbetweenthetwoBTSs:v  Locatethetrainv  PerformmulHplesimulaHonsto

obtainstaHsHcallyvalidresultsv  Thousandsofsimula4onsper

BaselineScenarioandJammeredScenario!!Ja

mmered

Scena

rio

BaselineScenario

v  Althoughthejammerinthenoisyareaisnotsopowerfultoblocktotallythesignal,itincreasesthepacketlossesandsotheend-to-enddelay(duetopacketretransmissions).

12

SimulaHonResultsforSilverJammer(II)

v  Aconnectedlinkdoesn’timplyavalidlinkforETCS.

Once5%ofpacketlossispassed,e2edelayincreasessignificantly

1.   Oursimula4onframeworkallowsassessingtheimpactofjammeringdevicesintheapplica4onlayers(i.e.,ETCS).

v  EasilyevaluatemulHplescenarioswithabroadsetofparameters(layout,type,locaHonandpowerofthejammer,…).

v  IdenHfythedependencybetweenKPIsandthoseparameters.

v  IdenHfyweakpointsandproviderecommendaHons(overlapingofcoverageareas,…).

2.   Simula4onresultsprovethatinforma4onprovidedbythenetworkdevicescouldbeusedasanaddi4onalsensortodetectabnormalbehaviourora%acks.

v  Forexample,SNRcurvesmighthelptodetectthepresenceofjammeringdevices.

13

Conclusions

ImpactofEMa,acksignaturesonETCSQualityofServiceIndicators

MarinaAGUADO,UPV/EHUChrisHanPINEDO,UPV/EHUEduardoJACOB,UPV/EHU