NAVWAR vs. Electronic Warfare: What’s the Difference?
The electromagnetic (EM) spectrum has long had its uses in the military arena — ever since battleships began to get equipped with wireless telegraphy sets at the turn of the 20th century.
Today, EM signals play a wide-ranging role in warfare and defense, spawning an ever-growing number of descriptive terms. Two of the most commonly used terms are electronic warfare (EW) and navigation warfare (NAVWAR). Here’s what they mean and how they differ.
What is electronic warfare?
Electronic warfare refers to any directed use of electromagnetic energy in the pursuit of military operations, military intelligence, or defense against military aggression.
EM energy sources used for EW include gamma rays, infrared, microwaves, millimeter waves, radio waves, ultraviolet light, and visible light. EW usually refers to the use of these sources to disrupt an adversary’s access to and use of the EM spectrum for navigation, communications, or surveillance.
An increasingly important aspect of EW is that its use can extend beyond traditional conflict zones. Like cyber warfare, EW may be used to target critical national infrastructure , such as energy grids and cellular networks, with the intention of disrupting daily life and causing economic harm.
What is NAVWAR?
Navigation warfare or NAVWAR (not to be confused with the U.S. Naval Information Warfare Systems Command, which uses the same acronym) is a subset of electronic warfare. It refers to the deliberate disruption of an adversary’s use of global navigation satellite system (GNSS) signals for navigation.
The earliest incidences of NAVWAR occurred during the Gulf War of 1990–1991, when Iraqi forces used signal jammers to disrupt the coalition forces’ use of GPS, which was at the time a relatively recent introduction.
Since then, disruption of GNSS signals has become a common military tactic, with nation-states engaged in a race to simultaneously develop and protect against new signal disruption techniques.
Offensive NAVWAR tactics: jamming, spoofing and cyberattacks
Today, offensive NAVWAR tactics tend to take one or more of three forms: signal jamming, signal spoofing, and cyberattacks on navigation systems data.
Signal jamming
This refers to the use of electromagnetic noise to drown out GNSS signals, which are very weak by the time they reach Earth. Jammers broadcast noise on the same frequency as that of GNSS, leaving receivers unable to distinguish the GNSS signal and less able to calculate their position.
While most military vehicles and equipment use encrypted signals and receivers that are hardened against jamming, any device that makes use of unprotected civilian GNSS signals is highly vulnerable.
This vulnerability can have major repercussions when military signal jamming is deployed over a wide range, as has been the case since at least 2018 in the conflict zones near the eastern Mediterranean. Signal jamming in these zones has frequently disrupted commercial shipping and air travel.
Signal spoofing
A more sophisticated NAVWAR tactic, signal spoofing involves transmitting false GNSS signals with the aim of fooling a navigation system into thinking it is somewhere else, or traveling in another direction, in order to convince either the pilot or the autonomous engine to make incorrect corrections.
Recent reports from the Ukraine-Russia war, for example, describe Ukraine fooling Russian drones into crashing by targeting their built-in geofencing controls. The spoofed signal tells the drone’s GNSS receiver that it’s entering an airport’s no-fly zone, upon which the drone immediately lands in accordance with its safety procedures.
Spoofing can also be used to attack critical national infrastructure (CNI) that relies on the precise timing information contained in GNSS signals. If not protected, infrastructure such as electricity grids and cellular communications networks can be degraded or denied by spoofing.
Hacking
While jamming and spoofing attacks, categorized by many as cyberattacks and viewed as an element of a cybersecurity framework, are targeted directly at the receiver’s radio frequency (RF) capabilities, NAVWAR attacks can also be conducted on the processing of navigation data.
For instance, National Marine Electronics Association (NMEA) data used in navigation systems can be vulnerable to so-called man-in-the-middle (MITM) attacks, which intercept and alter data between the GNSS receiver and the software system that uses it for tactical decision-making.
Technologies to defend against NAVWAR attacks
Protecting military equipment and personnel against attacks is the other side of the NAVWAR coin. Techniques used to harden and protect equipment include:
- Encrypted signals: GNSS systems typically provide encrypted signals for authorized use. These signals are highly resistant to spoofing and jamming. In the case of GPS, the most recently introduced encrypted signal is known as M-Code, while Europe’s Galileo operates the Public Regulated Service (PRS) signal.
- Advanced antenna systems: Military-grade controlled reception pattern antennas (CRPAs) mitigate against spoofing and jamming by analyzing signals’ angle of arrival (AOA) and directing the antenna beam away from threats and toward genuine GNSS signals. Less sophisticated fixed reception pattern antennas (FRPAs) can detect spoofed signals and raise an alarm.
- Anti-jam signal processing: Military-grade GNSS receivers can mitigate against signal jamming using space-time adaptive processing (STAP) and/or space-frequency adaptive processing (SFAP) signal processing techniques.
- Alternative sensors: Additional sensors are integrated into a multisensor positioning, navigation, and timing (PNT) system to ensure continuity of navigation when GNSS is compromised. These typically include inertial measurement units (IMUs) and can also include light detection and ranging (LiDAR), camera vision, Wi-Fi, cellular positioning, and more.
Techniques and technologies for assessing NAVWAR vulnerabilities
It’s essential to understand the performance, robustness, and resilience of any mission-critical GNSS-based PNT system in the face of a NAVWAR attack. Thorough testing, both in the lab and in the field, is critical. Resources typically used for testing receivers, systems, equipment, and vehicles include:
Simulators
RF signal simulators like KeysightPNT simulation platforms can replicate civilian and (where authorized) encrypted signals, including GPS M-Code and Galileo PRS, for comprehensive GNSS receiver testing in the lab.
The KeysightPNT X simulation system offers powerful, flexible capabilities — from interference generation and spoofing scenarios to modeling antenna patterns for CRPA testing and supporting hardware in the loop (HIL) environments for multisensor integration. Selective jamming, also known as Blue Force Electronic Attack (BFEA), can also be simulated.
Meanwhile, Keysight SimINERTIAL enables performance testing of military-grade integrated/embedded GNSS/inertial systems in the lab.
Anechoic chambers
To test the physical beamforming capabilities of a CRPA antenna, simulated signals are transmitted over the air to the antenna in a sealed or anechoic chamber. Keysight’s unique, patented approach to chamber-based CRPA testing heightens realism and extends test times.
Test ranges
Field testing of military equipment in realistic jamming and spoofing conditions is typically conducted on outdoor test ranges in remote locations. Jammer noise or spoofed signals are transmitted over the air for the duration of the test. The use of dedicated and authorized test ranges helps minimize the impact of testing on civilian and commercial systems. And it helps developers avoid breaches of local, national, and international law.
Keysight supports two core methodologies for controllable and repeatable field testing of NAVWAR capabilities. The ground-breaking Portable Simulator enables the device under test (DUT) to receive live-sky signals while the simulator broadcasts additional signals, enabling myriad test cases for PNT resilience. For record and playback testing, the handheld Keysight GSS6450 records real signals in high dynamic range for repeatable playback in the lab.
Testing PNT systems with Keysight
Keysight is a trusted partner for defense developers and integrators in all aspects of PNT test and measurement.
Learn more about our PNT solutions for military and defense organizations.