{"id":"https://openalex.org/W4417338068","doi":"https://doi.org/10.1109/tcomm.2025.3644474","title":"Timestamp Manipulation-Based GPS Spoofing Attacks on the MAVLink 2.0 Protocol for UAV Communication: An Empirical Study","display_name":"Timestamp Manipulation-Based GPS Spoofing Attacks on the MAVLink 2.0 Protocol for UAV Communication: An Empirical Study","publication_year":2025,"publication_date":"2025-12-15","ids":{"openalex":"https://openalex.org/W4417338068","doi":"https://doi.org/10.1109/tcomm.2025.3644474"},"language":"en","primary_location":{"id":"doi:10.1109/tcomm.2025.3644474","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcomm.2025.3644474","pdf_url":null,"source":{"id":"https://openalex.org/S196647941","display_name":"IEEE Transactions on Communications","issn_l":"0090-6778","issn":["0090-6778","1558-0857"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research-information.bris.ac.uk/en/publications/40fc12ed-a085-4034-98aa-9839f47d2e3b","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120807612","display_name":"Zack Colton","orcid":null},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]},{"id":"https://openalex.org/I2801520950","display_name":"At Bristol","ror":"https://ror.org/039fp5n52","country_code":"GB","type":"nonprofit","lineage":["https://openalex.org/I2801520950"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Zack Colton","raw_affiliation_strings":["Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","institution_ids":["https://openalex.org/I36234482","https://openalex.org/I2801520950"]},{"raw_affiliation_string":"School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059143742","display_name":"Alma Oracevic","orcid":"https://orcid.org/0000-0002-7723-3932"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]},{"id":"https://openalex.org/I2801520950","display_name":"At Bristol","ror":"https://ror.org/039fp5n52","country_code":"GB","type":"nonprofit","lineage":["https://openalex.org/I2801520950"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Alma Oracevic","raw_affiliation_strings":["Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","institution_ids":["https://openalex.org/I36234482","https://openalex.org/I2801520950"]},{"raw_affiliation_string":"School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001386212","display_name":"Selma Dilek","orcid":"https://orcid.org/0000-0002-1433-8809"},"institutions":[{"id":"https://openalex.org/I2801520950","display_name":"At Bristol","ror":"https://ror.org/039fp5n52","country_code":"GB","type":"nonprofit","lineage":["https://openalex.org/I2801520950"]},{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Selma Dilek","raw_affiliation_strings":["Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Bristol Cyber Security Group, School of Computer Science, University of Bristol, Bristol, U.K","institution_ids":["https://openalex.org/I36234482","https://openalex.org/I2801520950"]},{"raw_affiliation_string":"School of Computer Science, Bristol Cyber Security Group, University of Bristol, United Kingdom","institution_ids":["https://openalex.org/I36234482"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5120807612"],"corresponding_institution_ids":["https://openalex.org/I2801520950","https://openalex.org/I36234482"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.52044043,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"74","issue":null,"first_page":"2564","last_page":"2579"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11133","display_name":"UAV Applications and Optimization","score":0.9316999912261963,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11133","display_name":"UAV Applications and Optimization","score":0.9316999912261963,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11489","display_name":"Air Traffic Management and Optimization","score":0.00930000003427267,"subfield":{"id":"https://openalex.org/subfields/2202","display_name":"Aerospace Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.006500000134110451,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/timestamp","display_name":"Timestamp","score":0.8495000004768372},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.682200014591217},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.6517000198364258},{"id":"https://openalex.org/keywords/global-positioning-system","display_name":"Global Positioning System","score":0.5752999782562256},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5088000297546387},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4984999895095825},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.46560001373291016},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.3937000036239624}],"concepts":[{"id":"https://openalex.org/C113954288","wikidata":"https://www.wikidata.org/wiki/Q186885","display_name":"Timestamp","level":2,"score":0.8495000004768372},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7069000005722046},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.682200014591217},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.6517000198364258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6014999747276306},{"id":"https://openalex.org/C60229501","wikidata":"https://www.wikidata.org/wiki/Q18822","display_name":"Global Positioning System","level":2,"score":0.5752999782562256},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5088000297546387},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4984999895095825},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.46560001373291016},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3937000036239624},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.3822000026702881},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.38029998540878296},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C2778562939","wikidata":"https://www.wikidata.org/wiki/Q1298791","display_name":"Synchronization (alternating current)","level":3,"score":0.3747999966144562},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.36469998955726624},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3465999960899353},{"id":"https://openalex.org/C111814575","wikidata":"https://www.wikidata.org/wiki/Q550893","display_name":"IP address spoofing","level":5,"score":0.3109999895095825},{"id":"https://openalex.org/C169468491","wikidata":"https://www.wikidata.org/wiki/Q146923","display_name":"Middleware (distributed applications)","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.29789999127388},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.29120001196861267},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2759999930858612},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2745000123977661},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.26030001044273376}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tcomm.2025.3644474","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcomm.2025.3644474","pdf_url":null,"source":{"id":"https://openalex.org/S196647941","display_name":"IEEE Transactions on Communications","issn_l":"0090-6778","issn":["0090-6778","1558-0857"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Communications","raw_type":"journal-article"},{"id":"pmh:oai:research-information.bris.ac.uk:publications/40fc12ed-a085-4034-98aa-9839f47d2e3b","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/40fc12ed-a085-4034-98aa-9839f47d2e3b","pdf_url":null,"source":{"id":"https://openalex.org/S7407055359","display_name":"Explore Bristol Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Colton, Z, Oracevic, A & Dilek, S 2025, 'Timestamp Manipulation-Based GPS Spoofing Attacks on the MAVLink 2.0 Protocol for UAV Communication : An Empirical Study', IEEE Transactions on Communications. https://doi.org/10.1109/TCOMM.2025.3644474","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:research-information.bris.ac.uk:openaire/40fc12ed-a085-4034-98aa-9839f47d2e3b","is_oa":true,"landing_page_url":"https://hdl.handle.net/1983/40fc12ed-a085-4034-98aa-9839f47d2e3b","pdf_url":null,"source":{"id":"https://openalex.org/S7407055359","display_name":"Explore Bristol Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"Colton, Z, Oracevic, A & Dilek, S 2025, 'Timestamp Manipulation-Based GPS Spoofing Attacks on the MAVLink 2.0 Protocol for UAV Communication : An Empirical Study', IEEE Transactions on Communications. https://doi.org/10.1109/TCOMM.2025.3644474","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":{"id":"pmh:oai:research-information.bris.ac.uk:publications/40fc12ed-a085-4034-98aa-9839f47d2e3b","is_oa":true,"landing_page_url":"https://research-information.bris.ac.uk/en/publications/40fc12ed-a085-4034-98aa-9839f47d2e3b","pdf_url":null,"source":{"id":"https://openalex.org/S7407055359","display_name":"Explore Bristol Research","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Colton, Z, Oracevic, A & Dilek, S 2025, 'Timestamp Manipulation-Based GPS Spoofing Attacks on the MAVLink 2.0 Protocol for UAV Communication : An Empirical Study', IEEE Transactions on Communications. https://doi.org/10.1109/TCOMM.2025.3644474","raw_type":"info:eu-repo/semantics/publishedVersion"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2074040836","https://openalex.org/W2159682369","https://openalex.org/W2166146990","https://openalex.org/W2185130301","https://openalex.org/W2510951381","https://openalex.org/W2537284334","https://openalex.org/W2889372524","https://openalex.org/W2915352631","https://openalex.org/W2948812961","https://openalex.org/W2955556953","https://openalex.org/W2963513677","https://openalex.org/W2964266016","https://openalex.org/W3021157052","https://openalex.org/W3049118713","https://openalex.org/W3113075445","https://openalex.org/W3131722576","https://openalex.org/W3138755759","https://openalex.org/W3202150210","https://openalex.org/W3215099022","https://openalex.org/W3217574361","https://openalex.org/W4205099657","https://openalex.org/W4312899763","https://openalex.org/W4321260713","https://openalex.org/W4324007088","https://openalex.org/W4386952049","https://openalex.org/W4391408674","https://openalex.org/W4400645752","https://openalex.org/W4402263872","https://openalex.org/W4403498495","https://openalex.org/W4404180350","https://openalex.org/W4404189901","https://openalex.org/W4413279544"],"related_works":[],"abstract_inverted_index":{"Unmanned":[0],"aerial":[1],"vehicles":[2],"(UAVs)":[3],"are":[4,12],"becoming":[5],"increasingly":[6],"prevalent":[7],"in":[8,19,78,125],"modern":[9],"society,":[10],"but":[11,58],"often":[13],"insecure":[14],"by":[15],"design":[16],"or":[17],"limited":[18,80],"security":[20,88],"capability":[21],"due":[22],"to":[23,42,148],"computational":[24],"constraints.":[25],"The":[26,121],"growing":[27],"open-source":[28],"UAV":[29],"ecosystem":[30,51],"has":[31,82],"further":[32],"enabled":[33],"custom":[34],"software":[35],"and":[36,65,129,139],"hardware":[37,130],"development,":[38],"frequently":[39],"without":[40,113],"adherence":[41],"established":[43],"best":[44],"practices.":[45],"At":[46],"the":[47,53,73,114,142,146],"centre":[48],"of":[49,75,116,145],"this":[50],"is":[52,123],"MAVLink":[54,76,91],"protocol,":[55],"used":[56],"primarily,":[57],"not":[59],"exclusively,":[60],"for":[61],"communication":[62],"between":[63],"UAVs":[64],"their":[66],"associated":[67],"Ground":[68],"Control":[69],"Stations":[70],"(GCSs).":[71],"Since":[72],"adoption":[74],"2.0":[77,92],"2017,":[79],"research":[81],"been":[83],"conducted":[84],"on":[85],"its":[86,96],"in-built":[87],"mechanisms.":[89],"Although":[90],"supports":[93],"message":[94],"signing,":[95],"signature":[97],"scheme":[98],"remains":[99],"highly":[100],"vulnerable.":[101],"This":[102,133],"study":[103],"presents":[104],"a":[105,117],"novel":[106],"attack":[107,122,147],"that":[108],"exploits":[109],"GPS-based":[110],"timestamp":[111],"manipulation":[112],"knowledge":[115],"UAV\u2019s":[118],"secret":[119],"key.":[120],"evaluated":[124],"simulation,":[126],"hardware-in-the-loop":[127],"tests,":[128],"environment":[131],"tests.":[132],"paper":[134],"also":[135],"outlines":[136],"potential":[137],"countermeasures":[138],"briefly":[140],"discusses":[141],"broader":[143],"applicability":[144],"other":[149],"GPS-synchronised":[150],"systems":[151],"beyond":[152],"UAVs.":[153]},"counts_by_year":[],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-12-15T00:00:00"}
