GBAS Precision Landing at 50 Airports: A Safety Bulletin on Countering GPS Spoofing

TITLE: GBAS Precision Landing at 50 Airports: A Safety Bulletin on Countering GPS Spoofing DESCRIPTION: An analysis of Ground-Based Augmentation System (GBAS) deployment and its role in mitigating GPS signal integrity threats during precision approach and landing operations.

CONTENT: Data from the European Union Aviation Safety Agency (EASA) indicates a sustained increase in reported GNSS signal integrity events affecting civil aviation. In this operational environment, the role of Ground-Based Augmentation Systems (GBAS) for precision approach has come under renewed scrutiny. Deployed at approximately 50 major airports globally, GBAS represents a critical infrastructure investment to enhance landing safety. This FlySafe Research bulletin provides a data-driven analysis of GBAS capabilities and limitations, focusing on its function within airspace where signal anomalies are documented. The analysis is based exclusively on publicly available data from aviation authorities and technical publications.

Operational Context: The Scale of GNSS Signal Anomalies

The prevalence of GNSS signal interference necessitates a clear understanding of the operational baseline. According to EASA Safety Information Bulletin (SIB) No. 2024-02R1, issued in September 2024, reports of GNSS interference in certain European regions increased by 1000% between the first half of 2023 and the first half of 2024. The bulletin specifically references increased event reporting within the Vilnius (EYVL), Warsaw (EPWW), and Riga (EVRA) Flight Information Regions (FIRs). A separate report by OpsGroup, analyzing data from the OpenSky Network, quantified that over 41,000 commercial flights logged position errors indicative of spoofing during a one-month period in mid-2024. These events are not confined to a single region; similar anomalies have been reported in airspace over the Black Sea, the Eastern Mediterranean, and parts of the Middle East.

The operational impact is concrete. For instance, on November 18, 2023, a commercial flight operating into Vilnius Airport (EYVI) executed a missed approach after the flight crew received conflicting navigation information and RAIM (Receiver Autonomous Integrity Monitoring) alerts, as later referenced in a European Air Navigation Planning Group (EANPG) working paper. Such incidents underscore the vulnerability of satellite-based navigation during critical flight phases and validate the industry's focus on augmentation systems like GBAS.

GBAS Technical Architecture and Deployment Status

A Ground-Based Augmentation System is a localized differential GPS (DGPS) installation. As defined in ICAO Annex 10, Volume I, a GBAS ground station comprises a minimum of three GPS reference receivers at precisely surveyed locations, a processing facility, and a VHF Data Broadcast (VDB) transmitter. The system calculates correction and integrity data by comparing the known positions of its reference antennas with the positions computed from incoming GPS signals. This data is then broadcast to aircraft within a nominal 23-nautical-mile service volume via a dedicated VHF link, typically in the 108-118 MHz band.

The current global deployment is limited but strategically significant. As of Q1 2025, data from the FAA and EUROCONTROL indicate GBAS installations are operational at approximately 50 international airports. Key hubs include Frankfurt (EDDF), Sydney (YSSY), Houston (KIAH), San Francisco (KSFO), and Zurich (LSZH). The system installed at these locations is certified for GBAS Approach Service Type-C (GAST-C), enabling lateral and vertical guidance for Category I precision approaches with decision heights as low as 200 feet. The physical infrastructure is subject to stringent siting and security criteria; FAA Order 6884.1 mandates installation within a secure Airport Operations Area (AOA) and within three nautical miles of the associated runway threshold.

Analysis of GBAS Protective Mechanisms Against Signal Anomalies

GBAS offers several architectural features that enhance resilience compared to standalone GPS, though within a defined operational envelope.

1. Integrity Through Redundant Reference Receivers: The core protection lies in the multiple, fixed reference receivers. Since their locations are surveyed to centimeter-level accuracy, any significant anomaly in the GPS signal that affects the computed position will create a discrepancy. The GBAS processing facility performs continuous consistency checks across all reference receivers. A spoofing signal that manipulates the apparent satellite constellation geometry would likely be detected by this ground-based monitoring before the corrected data is broadcast, triggering an integrity alert and disabling the approach service.

2. Independent VHF Data Link: The correction and integrity data is transmitted to aircraft via a terrestrial VHF link, not through the compromised GNSS signal structure. A successful spoofing event would therefore require compromising two distinct and separate systems: the space-based GNSS signals and the local, ground-based VHF broadcast. The VDB signal is also more robust against remote interference due to its higher power and line-of-sight propagation characteristics compared to weak GNSS signals from orbit.

3. Physical Security and Localization: The requirement for ground equipment to be housed within a secure AOA mitigates risks of physical tampering. Furthermore, the short-range, airport-specific nature of the system confines its service volume. An actor intending to disrupt GBAS operations would need to be geographically proximate to the airport, increasing the difficulty and risk of detection.

Identified Operational Gaps and Limitations

FlySafe analysis indicates that while GBAS enhances integrity for final approach, its protective scope is inherently bounded, leaving significant portions of flight operations exposed.

Limited Phase of Flight Coverage: GBAS service is activated for the final approach segment only, typically inside 10 nautical miles from the runway. The majority of documented GNSS interference events occur during en-route or initial approach phases, well outside the GBAS service volume. An aircraft subjected to spoofing during cruise may arrive at the final approach fix with a corrupted navigation database or misleading situational awareness, which GBAS cannot retroactively correct.

Fundamental GNSS Dependency: GBAS is an augmentation system, not a replacement. It requires valid GPS signals to function. In a scenario of effective jamming (denial of signal), rather than spoofing (corruption of signal), the GBAS reference receivers would be unable to compute corrections, and the approach would be unavailable. This contrasts with Instrument Landing System (ILS), which operates on a completely independent frequency spectrum.

Sparse Global Deployment: With approximately 50 equipped airports, GBAS availability is a fraction of global aviation infrastructure. For example, a flight experiencing anomalies in the Baghdad (ORBB) FIR may have no GBAS-equipped destination or alternate airport within a viable diversion radius. This forces continued reliance on standalone GNSS or conventional navigation aids.

Theoretical Coordinated Spoofing Vulnerability: A sophisticated, localized spoofing source could theoretically target both the GBAS ground reference receivers and approaching aircraft simultaneously with a consistent false signal. In this scenario, the differential correction might fail to detect the anomaly, as all measured positions would be shifted uniformly. While operationally complex to execute, this potential vulnerability is acknowledged in academic research on differential GNSS systems.

Practical Guidance for Flight Operations and Dispatch

Based on review of current NOTAMs, EASA SIBs, and published airline procedures, FlySafe Research provides the following operational considerations.

Airspace Status & NOTAM Vigilance: Flight planning must include careful review of active NOTAMs for GNSS interference. For example, a recurring NOTAM for the Luleå (ESSA) FIR in Sweden (Series AXXXX/24) advises of "GNSS SIGNAL MAY BE UNRELIABLE." Dispatchers and crews should identify such advisories in the Vilnius (EYVL), Warsaw (EPWW), Simferopol (UKFV), and Tehran (OIIX) FIRs, among others.

Affected Routes & Alternate Planning: For routes transiting FIRs with known interference, selection of destination and alternate airports with non-GNSS precision approach capabilities is critical. This prioritizes airports with operational ILS or, where available, GBAS. For instance, an operator routing to the Eastern Mediterranean may prioritize an alternate with ILS Cat II/III over one with only GPS-based approaches.

Aircraft System Configuration and Cross-Checks: Operators should ensure procedures emphasize the use of all available navigation sources. During flights in advisory airspace, crews should proactively cross-check FMS position against inertial reference systems and conventional VOR/DME fixes where available. Monitoring for RAIM alerts or unexpected track deviations is essential. Training programs, such as those implemented by several European carriers following EASA SIB 2024-02R1, now include specific modules on recognizing and responding to suspected GNSS spoofing.

GBAS Utilization Policy: For airlines whose fleets are equipped for GBAS approaches, a clear policy should mandate its use when available and operational, as it provides a higher integrity solution than standalone GPS LPV approaches. However, this must be paired with crew training on system limitations and reversionary procedures to ILS or conventional approaches if GBAS integrity alerts are generated.

The Evolving Landscape: Beyond GBAS

The industry response extends beyond a single system. The long-term strategy, as outlined in documents from ICAO's Navigation Systems Panel (NSP) and the multi-stakeholder GPS Spoofing Working Group, involves layered resilience.

Multi-Constellation GNSS (MC-GNSS): Modern avionics capable of utilizing multiple satellite constellations (GPS, Galileo, GLONASS, BeiDou) simultaneously are less vulnerable to spoofing targeted at a single system. The Galileo constellation, for example, broadcasts an authenticated commercial service (OS-NMA) designed to detect spoofed signals, with aviation certification pathways under development.

Alternative Position, Navigation, and Timing (APNT): Programs like the FAA's APNT initiative are evaluating ground-based backups, such as enhanced Distance Measuring Equipment (eDME) networks, to provide position information independent of GNSS. Furthermore, aircraft-based solutions like Advanced Inertial Reference Systems (AIRS) and Terrain-Referenced Navigation (TRN) are being integrated to provide bridging capability during GNSS outages.

GBAS Evolution: The development path for GBAS includes GAST-D, which will support Category III precision approaches. However, certification and deployment timelines remain long-term. The current GAST-C systems at 50 airports provide a foundational layer of protection for final approach but are one component of a necessary system-wide architecture.

Frequently Asked Questions

1. Can GBAS be used if GPS signals are completely jammed? No. GBAS is a differential GPS system. It requires the reception of GPS satellite signals at its ground reference stations to compute corrections. In a total jamming scenario where signals are denied, the GBAS ground station cannot generate correction data, and the approach service will be unavailable. Operators must revert to ILS or conventional non-precision approaches.

2. What specific actions should a flight crew take if they suspect GPS spoofing while on a GBAS approach? The primary action is to immediately discontinue the GBAS approach if any integrity alert is generated or if navigation indications contradict other validated sources (e.g., IRS, visual cues). Standard operating procedures dictate executing a missed approach. Crews should then switch to a non-GNSS-based approach (ILS or conventional) for another attempt, report the event to ATC using the prescribed phraseology ("GPS NAVIGATION LOSS OF INTEGRITY"), and file a detailed safety report post-flight.

3. How does a dispatcher identify if a destination airport has an operational GBAS approach? Dispatchers should consult the official aeronautical information publication (AIP) for the destination country, which will list published GBAS approach procedures (typically denoted as "GLS" or "GBAS" in the approach chart title). This must be cross-referenced with current NOTAMs to ensure the GBAS ground station and specific approach are operational and not subject to temporary restrictions.

Analysis based on publicly available data from EASA, FAA, ICAO, EUROCONTROL, and academic institutions only. FlySafe Research does not possess, access, or utilize classified or non-public information. This bulletin is for informational purposes and does not constitute operational advice. Operators must consult current NOTAMs, AIPs, and their national aviation authority for definitive guidance.