Abstract:High-precision time synchronization is a vital prerequisite for many modern applications and technologies, including Smart Grids, Time-Sensitive Networking (TSN), and 5G networks. Although the Precision Time Protocol (PTP) can accomplish this requirement in trusted environments, it becomes unreliable in the presence of specific cyber attacks. Mainly, time delay attacks pose the highest threat to the protocol, enabling attackers to diverge targeted clocks undetected. With the increasing danger of cyber attacks, especially against critical infrastructure, there is a great demand for effective countermeasures to secure both time synchronization and the applications that depend on it. However, current solutions are not sufficiently capable of mitigating sophisticated delay attacks. For example, they lack proper integration into the PTP protocol, scalability, or sound evaluation with the required microsecond-level accuracy. This work proposes an approach to detect and counteract delay attacks against PTP based on cyclic path asymmetry measurements over redundant paths. For that, we provide a method to find redundant paths in arbitrary networks and show how this redundancy can be exploited to reveal and mitigate undesirable asymmetries on the synchronization path that cause the malicious clock divergence. Furthermore, we propose PTPsec, a secure PTP protocol and its implementation based on the latest IEEE 1588-2019 standard. With PTPsec, we advance the conventional PTP to support reliable delay attack detection and mitigation. We validate our approach on a hardware testbed, which includes an attacker capable of performing static and incremental delay attacks at a microsecond precision. Our experimental results show that all attack scenarios can be reliably detected and mitigated with minimal detection time.

SecureTime: Secure Multicast Time Synchronization

Robust and Secure Time-Synchronization Against Sybil Attacks for Sensor Networks

PTPsec: Securing the Precision Time Protocol Against Time Delay Attacks Using Cyclic Path Asymmetry Analysis

A Security Analysis and Revised Security Extension for the Precision Time Protocol

A Security Enhancement of the Precision Time Protocol Using a Trusted Supervisor Node

Encryption is Futile: Delay Attacks on High-Precision Clock Synchronization

Requirements for Secure Clock Synchronization

Secure Time Synchronization in WirelessSensor Networks: A MaximumConsensus-Based Approach

Vulnerability Analysis of Clock Synchronization Protocol Using Stochastic Petri Net

IEEE 1588 Based Time Synchronization System for a Seafloor Observatory Network

Preventing Time Synchronization in NTP's Broadcast Mode

A Devil of a Time: How Vulnerable is NTP to Malicious Timeservers?

Securing Wireless Systems Via Lower Layer Enforcements

Secure Combination of Untrusted Time information Based on Optimized Dempster-Shafer Theory

An Authentication Scheme Designed for the Lightweight Precision Time Protocol in IoT

Secure Clock Synchronization under Collusion Attacks

Nanosecond-Level Resilient GNSS-Based Time Synchronization in Telecommunication Networks Through WR-PTP HA

The Impact of DNS Insecurity on Time

Time Synchronization of TESLA-enabled GNSS Receivers

G-SINC: Global Synchronization Infrastructure for Network Clocks

Protecting GNSS-based Services using Time Offset Validation