Signal spoof detection at base stations

A system comprising:

• a memory comprising instructions;
• and
• a processor coupled to the memory, the processor configured to execute the instructions to facilitate performance of operations comprising:
• selecting a measurement point along a satellite orbit of a satellite in view of a base station;
• generating power spectral density data based upon signal power measurements of signals received by the base station from the satellite at the measurement point;
• training one or more models, using the power spectral density data, for evaluating received signals to compare power spectral density of the received signals to power spectral density data of a plurality of prior observations;
• evaluating, using the one or more models, a received signal received by the base station in comparison to at least some of the power spectral density data of the plurality of prior observations to determine an average divergence of the received signal from the at least some of the power spectral density data, and determining whether the base station is experiencing a spoofing attack based upon the average divergence;
• generating an alert that the base station is experiencing the spoofing attack based upon the average divergence exceeding a threshold;
• and
• performing one or more remedial actions based upon the determination of whether the base station is experiencing a spoofing attack.

A non-transitory computer-readable medium storing instructions that when executed facilitate performance of operations comprising:

• calculating ratios of carrier power to noise power associated with signals received by a base station from one or more satellites in a constellation;
• identifying a variance of the ratios of carrier power to noise power associated with the base station;
• in response to determining that a ratio of carrier power to noise power of a signal received by the base station is an outlier based upon a comparison of the ratio of carrier power to noise power to the variance associated with the base station, determining that a transmit power of the signal has been tampered with and that the signal corresponds to a spoofing attack of the base station;
• performing, via a processor, one or more remedial actions based upon the determination that the signal corresponds to a spoofing attack of the base station;
• for each satellite of the one or more satellites, calculating a correlation coefficient between ratios of carrier power to noise power for sets of satellites;
• averaging the correlation coefficients for satellite pairs to create averaged correlation coefficients of the satellite pairs for determining whether a received signal is a spoofed signal;
• calculating a correlation coefficient of the received signal based upon a ratio of carrier power to noise power of the signal;
• and
• in response to the correlation coefficient diverging from the averaged correlation coefficients by a threshold amount, determining that the received signal is the spoofed signal.