{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T17:48:19Z","timestamp":1783014499890,"version":"3.54.6"},"reference-count":51,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2025,4,3]],"date-time":"2025-04-03T00:00:00Z","timestamp":1743638400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Priv. Secur."],"published-print":{"date-parts":[[2025,5,31]]},"abstract":"<jats:p>Phasor Measurement Units (PMUs) are critical devices in modern power grids, providing precise voltage and current phasor measurements (synchrophasors) for real-time monitoring, fault detection, and stability assessment. While previous research suggested that arbitrary time manipulation through GPS spoofing could disrupt grid operations, our study reveals that successful attacks require specific conditions, contrary to earlier assumptions.<\/jats:p>\n          <jats:p>\n            Through careful analysis of the synchrophasor data specification (IEEE Standard C37.118.x), we demonstrate that arbitrary time manipulation\n            <jats:bold>does not<\/jats:bold>\n            directly lead to phase manipulation. Instead, arbitrary manipulations can cause GPS holdover (loss of lock), alert operators with erroneous timing, and ultimately invalidate the received synchrophasors. An experiment with a commercial PMU confirms our specification analysis. We identify the time spoofing conditions to avoid GPS holdover and discover that nanosecond-scale signal alignment (approximately 375 ns error) and gradual time manipulation (around 50 ns\/s error) are required.\n          <\/jats:p>\n          <jats:p>Experiments on a commercial Wide Area Monitoring System (WAMS) testbed demonstrate that GPS spoofing meeting the identified criteria results in a 500-microsecond time error (10.8-degree phase error) after 12 hours without triggering alarms. Given that a 60-degree phase variation is considered a fault, triggering protection mechanisms, this GPS spoofing technique could potentially induce false faults within 70 hours.<\/jats:p>\n          <jats:p>To counter this threat, we propose a practical method to distinguish GPS spoofing-induced false faults from actual faults caused by events like lightning strikes or ground shorts. Analysis of 10 real-world incidents from the past six months demonstrates that genuine faults consistently exhibit instantaneous phase variations within three electrical cycles, providing a basis for differentiation.<\/jats:p>","DOI":"10.1145\/3720543","type":"journal-article","created":{"date-parts":[[2025,2,28]],"date-time":"2025-02-28T11:03:24Z","timestamp":1740740604000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":3,"title":["Revisiting GPS Spoofing in Phasor Measurement: Real-World Exploitation and Practical Detection in Power Grids"],"prefix":"10.1145","volume":"28","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7880-8569","authenticated-orcid":false,"given":"Chunghyo","family":"Kim","sequence":"first","affiliation":[{"name":"Korea Electric Power Corporation, Daejeon, Korea (the Republic of)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6730-1893","authenticated-orcid":false,"given":"Juhwan","family":"Noh","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology, Daejeon, Korea (the Republic of)"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0278-0816","authenticated-orcid":false,"given":"Esmaeil","family":"Ghahremani","sequence":"additional","affiliation":[{"name":"Hydro-Qu\u00e9bec, Montreal, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4879-1262","authenticated-orcid":false,"given":"Yongdae","family":"Kim","sequence":"additional","affiliation":[{"name":"Korea Advanced Institute of Science and Technology, Daejeon, Korea (the Republic of)"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2025,4,3]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2665461"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijepes.2023.109160"},{"key":"e_1_3_2_4_2","first-page":"1","volume-title":"Proceedings of the 72nd Annual Conference for Protective Relay Engineers","author":"Bell Jordan","year":"2019","unstructured":"Jordan Bell, Ariana Hargrave, Greg Smelich, and Brian Smyth. 2019. Considerations when using charging current compensation in line current differential applications. In Proceedings of the 72nd Annual Conference for Protective Relay Engineers. IEEE, College Station, Texas, USA, 1\u201311."},{"key":"e_1_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2015.2489384"},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/CPRE48231.2021.9429837"},{"key":"e_1_3_2_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2010.2044815"},{"key":"e_1_3_2_8_2","unstructured":"Ebinuma Takuji. 2015. GPS-SDR-SIM: Software-Defined GPS Signal Simulator. Retrieved March 7 2025 from https:\/\/github.com\/osqzss\/gps-sdr-sim. (2015)."},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2662688"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2014.2346088"},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/PES.2011.6039836"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRS.2008.2009429"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/PECI.2014.6804565"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.3390\/en12234552"},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","unstructured":"Lin Huang and Qing Yang. 2015. GPS Spoofing: low-cost GPS emulator. In DEF CON 23 DEF CON. DOI:10.5446\/36387","DOI":"10.5446\/36387"},{"key":"e_1_3_2_16_2","doi-asserted-by":"publisher","DOI":"10.1109\/IEEESTD.2018.8577045"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2016.2535898"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRS.2013.2240706"},{"key":"e_1_3_2_19_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2011.2113361"},{"key":"e_1_3_2_20_2","first-page":"1","volume-title":"Proceedings of the 38th Annual Western Protective Relay Conference","author":"Kasztenny Bogdan","year":"2011","unstructured":"Bogdan Kasztenny, Normann Fischer, Ken Fodero, and Adrian Zvarych. 2011. Communications and data synchronization for line current differential schemes. In Proceedings of the 38th Annual Western Protective Relay Conference. Washington State Universiry Professional Education, Spokane, Washington, USA, 1\u20134."},{"key":"e_1_3_2_21_2","unstructured":"Chunghyo Kim. 2023. A Video Clip Demonstrating the Test Results. (May2023). Retrieved April 1 2024 from https:\/\/youtu.be\/qAiclhGmajY"},{"key":"e_1_3_2_22_2","unstructured":"Chunghyo Kim. 2024. A Video Clip Illustrating Receivers\u2019 Responses under a Sophisticated GPS Spoofing Attack. (Jan.2024). Retrieved April 1 2024 from https:\/\/youtu.be\/fLtjvGQ_P7o"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1002\/wene.223"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijepes.2019.105549"},{"key":"e_1_3_2_25_2","unstructured":"Justin Mahaffey. 2013. Timing is Everything. Retrieved March 7 2025 from https:\/\/www.csemag.com\/articles\/timing-is-everything\/. (March2013)."},{"key":"e_1_3_2_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRD.2009.2034293"},{"key":"e_1_3_2_27_2","first-page":"25","volume-title":"Proceedings of the IEEE\/NIST Timing Challenges in the Smart Grid Workshop","author":"Martin Aeron","year":"2016","unstructured":"Aeron Martin. 2016. Why industry need time. In Proceedings of the IEEE\/NIST Timing Challenges in the Smart Grid Workshop. NIST, Gaithersburg, Maryland, USA, 25\u201330."},{"key":"e_1_3_2_28_2","first-page":"1","volume-title":"Proceedings of the 33rd Annual Western Protective Relay Conference","author":"Mart\u00ednez Enrique","year":"2006","unstructured":"Enrique Mart\u00ednez, Nicol\u00e1s Ju\u00e1rez, Armando Guzm\u00e1n, Greg Zweigle, and Jean Le\u00f3n. 2006. Using synchronized phasor angle difference for wide-area protection and control. In Proceedings of the 33rd Annual Western Protective Relay Conference. Washington State University Professional Education, Spokane, Washington, USA, 1\u201311."},{"key":"e_1_3_2_29_2","volume-title":"Final Report on the August 14, 2003 Blackout in the United States and Canada : Causes and Recommendations","author":"Muir A.","year":"2004","unstructured":"A. Muir and J. Lopatto. 2004. Final Report on the August 14, 2003 Blackout in the United States and Canada : Causes and Recommendations. Technical Report. NERC."},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1049\/iet-cps.2017.0033"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRD.2008.2002665"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2016.7860525"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRD.2007.910982"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2016.2526658"},{"key":"e_1_3_2_35_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2717449"},{"key":"e_1_3_2_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/SGC54087.2021.9664217"},{"key":"e_1_3_2_37_2","volume-title":"Line Differential Protection and Control Device Easergy MiCOM P532 Technical Manual","author":"Schneider Electric","year":"2023","unstructured":"Schneider Electric 2023. Line Differential Protection and Control Device Easergy MiCOM P532 Technical Manual. Schneider Electric. Retrieved March 7, 2025 from https:\/\/www.se.com\/il\/en\/download\/document\/P532_EN_M_R-m8__308_675\/"},{"key":"e_1_3_2_38_2","volume-title":"Synchrowave Central Software Instruction Manual","author":"Schweitzer Engineering Laboratories","year":"2018","unstructured":"Schweitzer Engineering Laboratories 2018. Synchrowave Central Software Instruction Manual. Schweitzer Engineering Laboratories. Retrieved March 7, 2025 from https:\/\/selinc.com\/products\/5078-2\/"},{"key":"e_1_3_2_39_2","volume-title":"Data Sheet for SEL-787 Transformer Protection Relay","author":"Schweitzer Engineering Laboratories","year":"2020","unstructured":"Schweitzer Engineering Laboratories 2020. Data Sheet for SEL-787 Transformer Protection Relay. Schweitzer Engineering Laboratories. Retrieved March 7, 2025 from https:\/\/selinc.com\/api\/download\/2818\/"},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijcip.2012.09.003"},{"key":"e_1_3_2_41_2","volume-title":"SIPROTEC Line Differential Protection 7SD80 Manual v4.6","author":"Siemens","year":"2011","unstructured":"Siemens 2011. SIPROTEC Line Differential Protection 7SD80 Manual v4.6. Siemens. Retrieved March 7, 2025 from https:\/\/cache.industry.siemens.com\/dl\/files\/528\/109742528\/att_900609\/v1\/7SD80xx_Manual_A1_V040003_us.pdf"},{"key":"e_1_3_2_42_2","unstructured":"Alison Silverstein. 2017. Synchrophasors and the Grid. Retrieved March 7 2025 from https:\/\/www.naspi.org\/sites\/default\/files\/reference_documents\/naspi_naruc_silverstein_20170714.pdf. (Sep.2017)."},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/PESGM.2018.8586533"},{"key":"e_1_3_2_44_2","volume-title":"GNSS Data Processing, Volume I: Fundamentals and Algorithms","author":"Subirana Jaume Sanz","year":"2013","unstructured":"Jaume Sanz Subirana, Jos\u00e9 Miguel Juan Zornoza, and Manuel Hern\u00e1ndez-Pajares. 2013. GNSS Data Processing, Volume I: Fundamentals and Algorithms. ESA Communications, Noordwijk, the Netherlands."},{"key":"e_1_3_2_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046719"},{"key":"e_1_3_2_46_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICPHM.2014.7036392"},{"key":"e_1_3_2_47_2","first-page":"1","volume-title":"Proceedings of the Black Hat Europe 2015","author":"Wang Kang","year":"2015","unstructured":"Kang Wang, Shuhua Chen, and Aimin Pan. 2015. Time and position spoofing with open source projects. In Proceedings of the Black Hat Europe 2015. UBM, Amsterdam, The Netherlands, 1\u20138."},{"key":"e_1_3_2_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/2627393.2627398"},{"key":"e_1_3_2_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2010.2050345"},{"key":"e_1_3_2_50_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2012.2227342"},{"key":"e_1_3_2_51_2","volume-title":"Numerical Differential Protection: Principles and Application","author":"Ziegler Gerhard","year":"2012","unstructured":"Gerhard Ziegler. 2012. Numerical Differential Protection: Principles and Application. John Wiley & Sons, Hoboken, New Jersey, USA. 30\u201334 pages."},{"key":"e_1_3_2_52_2","doi-asserted-by":"publisher","DOI":"10.1109\/TPWRS.2019.2936277"}],"container-title":["ACM Transactions on Privacy and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3720543","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3720543","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T01:57:38Z","timestamp":1750298258000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3720543"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4,3]]},"references-count":51,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,5,31]]}},"alternative-id":["10.1145\/3720543"],"URL":"https:\/\/doi.org\/10.1145\/3720543","relation":{},"ISSN":["2471-2566","2471-2574"],"issn-type":[{"value":"2471-2566","type":"print"},{"value":"2471-2574","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,4,3]]},"assertion":[{"value":"2024-09-03","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-02-16","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2025-04-03","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}