Abstract
In this paper, we present a low-cost distance-spoofing attack on a millimeter-wave frequency-modulated continuous wave (FMCW) radar. It uses only a replica radar chipset and a single compact microcontroller board in mass production. No expensive and bulky test instrument is required; hence, a low-cost and lightweight attack setup is developed. Despite the limited hardware resources used in this setup, the replica radar can be precisely synchronized with the target radar for distance spoofing. A half-chirp modulation scheme enables timing compensation between crystal oscillators on the replica and the target radar boards. A two-step delay insertion scheme precisely controls the relative delay difference between two radars at nanosecond order; consequently, the attacker can manipulate the distance measured at the target radar with only a \(\pm \,10\) m ranging error. Moreover, the feasibility of spoofing attacks on a conventional countermeasure employing random-chirp modulation is discussed. Simulation-based experiments reveal that the attack occurs successfully by estimating the random chirp pattern. This demonstrates the potential feasibility of low-cost malicious attacks on commercial FMCW radar as a physical security threat.
Similar content being viewed by others
References
Analog Devices Inc.: ADF4159: Direct Modulation/Fast Waveform Generating, 13 GHz, Fractiondal-N Frequency Synthesizer Rev. E. http://www.analog.com/media/en/technical-documentation/data-sheets/ADF4159.pdf. Accessed 6 Apr 2020
Analog Devices Inc.: ADF5901: 24 GHz VCO and PGA with 2-Channel PA Output Rev. 0. http://www.analog.com/media/en/technical-documentation/data-sheets/ADF5901.pdf. Accessed 6 Apr 2020
Analog Devices Inc.: ADF5904: 4-Channel, 24 GHz Receiver Downconverter Rev. A. http://www.analog.com/media/en/technical-documentation/data-sheets/ADF5904.pdf. Accessed 6 Apr 2020
Analog Devices Inc.: UG-866: EV-RADARMMIC2 User Guide Rev. 0. http://www.analog.com/media/en/technical-documentation/user-guides/EV-RADAR-MMIC2_UG-866.pdf. Accessed 6 Apr 2020
Arduino: Arduino Due. https://store.arduino.cc/usa/due. Accessed 6 Apr 2020
Chauhan, R.: A platform for false data injection in frequency modulated continuous wave radar. Master’s thesis, Utah State University (2014)
Chen, H.R.: FMCW radar jamming techniques and analysis. Master’s thesis, Naval Postgraduate School (2013)
Dutta, R.G., Guo, X., Zhang, T., Kwiat, K., Kamhoua, C., Njilla, L., Jin, Y.: Estimation of safe sensor measurements of autonomous system under attack. In: Proceedings of the 54th Annual Design Automation Conference 2017, pp. 1–6 (2017)
Jankiraman, M.: FMCW Radar Design. Artech House, Norwood (2018)
Kapoor, P., Vora, A., Kang, K.D.: Detecting and mitigating spoofing attack against an automotive radar. In: 2018 IEEE 88th Vehicular Technology Conference (VTC-Fall), pp. 1–6. IEEE (2018)
Kawahito, S., Halin, I.A., Ushinaga, T., Sawada, T., Homma, M., Maeda, Y.: A CMOS time-of-flight range image sensor with gates-on-field-oxide structure. IEEE Sens. J. 7(12), 1578–1586 (2007)
MathWorks: Automotive Adaptive Cruise Control Using FMCW Technology. https://www.mathworks.com/help/phased/examples/automotive-adaptive-cruise-control-using-fmcw-technology.html. Accessed 6 Apr 2020
Miura, N., Machida, T., Matsuda, K., Nagata, M., Nashimoto, S., Suzuki, D.: A low-cost replica-based distance-spoofing attack on mmWave FMCW radar. In: Proceedings of the 3rd ACM Workshop on Attacks and Solutions in Hardware Security Workshop, pp. 95–100 (2019)
Ranganathan, A., Danev, B., Francillon, A., Capkun, S.: Physical-layer attacks on chirp-based ranging systems. In: Proceedings of the Fifth ACM Conference on Security and Privacy in Wireless and Mobile Networks, pp. 15–26 (2012)
Richards, M.A.: Fundamentals of Radar Signal Processing. Tata McGraw-Hill Education, New York (2005)
Umehira, M., Nozawa, T., Makiko, Y., Xiaoyan, W., Takeda, S., Kuroda, H.: A novel iterative inter-radar interference reduction scheme for densely deployed automotive FMCW radars. In: 2018 19th International Radar Symposium (IRS), pp. 1–10. IEEE (2018)
Wang, H.N., Huang, Y.W., Chung, S.J.: Spatial diversity 24-GHz FMCW radar with ground effect compensation for automotive applications. IEEE Trans. Veh. Technol. 66(2), 965–973 (2016)
Yan, C., Xu, W., Liu, J.: Can you trust autonomous vehicles: contactless attacks against sensors of self-driving vehicle. DEF CON 24 (2016)
Acknowledgements
This paper is partially based on results obtained from a project, JPNP16007, commissioned by the New Energy and Industrial Technology Development Organization (NEDO).
Author information
Authors and Affiliations
Corresponding author
Additional information
Publisher's Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Electronic supplementary material
Below is the link to the electronic supplementary material.
Rights and permissions
About this article
Cite this article
Nashimoto, S., Suzuki, D., Miura, N. et al. Low-cost distance-spoofing attack on FMCW radar and its feasibility study on countermeasure. J Cryptogr Eng 11, 289–298 (2021). https://doi.org/10.1007/s13389-020-00252-5
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s13389-020-00252-5