Strategies for Securing ST 2059-2 PTP Networks
Metadata
- Publisher
- SMPTE — White Plains, NY, USA
- Doc Type
- Conference Paper
- Content Type
- Original Research
- Volume
- 2019, No. 10, pp. 1–19
- Abstract
- As the SMPTE ST 2059-2 standard for accurate time transfer gains further traction in real-world All-IP Studio deployments, it is important for broadcasters and system integrators alike to understand how time transfer using the IEEE 1588 Precision Time Protocol (PTP) profile as defined in the SMPTE standard could be affected by unintentional or malicious tampering of the different system parts that guarantee both stable and accurate delivery of time for all media essence based on standardized IP transports such as those defined in the SMPTE ST 2110 series or AES67 standards. Given the mission-critical nature of broadcast infrastructure, securing time distribution is rapidly becoming a mandatory requirement. Whilst ST 2059-2 defines PTP profile capabilities and PTP parameter values that can be used, it doesn't address how to secure the various parts that define the timing system as a whole. — The IEEE 1588 standard provides a certain level of fault tolerance by autonomously activating an auxiliary reference in case of loss of the primary time source. Yet, the overall synchronization performance is not sufficiently well protected by the protocol to withstand either deliberate attacks or cope with misconfigured or malfunctioning devices. Consequently, both scenarios have to be investigated in detail. This entails a thorough analysis of all the relevant threats ranging from spoofing or jamming attacks on GNSS receivers to misaligned message rates or corrupted messages to name but a few. This paper addresses possible ways how to secure different components of the timing system, ranging from the origination point of the reference clock(s) used as the primary time source(s), across the IP network infrastructure and finally to the media nodes generating or receiving ST 2110 flows. Beyond securing the timing system, special care should be taken to immediately identify any degradation and/or failures using multiple approaches that provide efficient means to correlate events. This is covered by a series of recommendations and best practices to ensure operational stability and reliability.
- Publication Date
- 2019-10-21
- DOI
10.5594/M001885- Link
- https://doi.org/10.5594/M001885
- Author(s)
- Thomas KernenMellanox Technologies, Route du Mandement 330, 1281 Russin, SwitzerlandNikolaus KeroOregano Systems, Franzosengraben 8, 1030 Vienna, Austria
- Keyword(s)
- PTP, ST 2059-2, Security, GNSS
- Copyright
- © 2019 Society of Motion Picture and Television Engineers, Inc.
Bibliographic Reference(s)
- Efficient Monitoring of ST2059-2 Based Time Transfer Performance [Active]
- ST 2059-2:2015 - SMPTE Standard - SMPTE Profile for Use of IEEE-1588 Precision Time Protocol in Professional Broadcast Applications," in ST 2059-2:2015, vol., no., pp.1-19, 9 April 2015. EXTERNAL
- Oregano Systems syn1588 NIC, https://www.oreganosystems.at/products/syn1588/hardware/syn1588r-pcie-nic EXTERNAL
- Department of Homeland Security: Improving the Operation and Development of Global Positioning System (GPS) Equipment Used by Critical Infrastructure, https://www.us-cert.gov/sites/default/files/documents/Improving_the_Operation_and_Development_of_Global_Positioning_System_%28GPS%29_Equipment_Used_by_Critical_Infrastructure_S508C.pdf EXTERNAL
- Center For Adavanced Defense (C4ADS): Above Us Only Stars - Exposing GPS Spoofing in Russia and Syria, March 26th 2019, https://c4ads.org/s/Above-Us-Only-Stars.pdf EXTERNAL
- IEEE 1588, “IEEE Standard for a Precision Clock Synchronization Protocol for Networked Measurement and Control Systems,” IEEE Instrumentation and Measurement Society, Piscataway, NJ, 2008. EXTERNAL
- 802.1AE-2018 - IEEE Standard for Local and metropolitan area networks-Media Access Control (MAC) Security, https://doi.org/10.1109/IEEESTD.2018.8585421 EXTERNAL
- Mellanox Technologies SN2010 switch, https://www.mellanox.com/page/ethernet_switch_overview EXTERNAL
- Meinberg Funkuhren microSync Grandmaster, https://www.meinbergglobal.com/english/products/microsync.htm EXTERNAL
- Galileo Initial Services have been restored, July 2019, https://www.gsa.europa.eu/newsroom/news/galileo-initial-services-have-now-been-restored EXTERNAL
- US Coast Guards: GPS Problem Reports Status, https://www.navcen.uscg.gov/?Do=GPSReportStatus EXTERNAL
- Eurocontrol: GNSS RFI Mitigation: International Efforts to Protect Aviation, September 2018, https://www.gps.gov/cgsic/meetings/2018/duchet.pdf EXTERNAL
- AIR FORCE OFFICIAL PRESS RELEASE - GPS GROUND SYSTEM ANOMALY, JAN 27, 2016, https://www.navcen.uscg.gov/pdf/gps/AirForceOfficialPressRelease.pdf EXTERNAL
- Network Complexity, Change, and Human Factors are Failing the Business, A Global Survey of Network Professionals. Dimensional Research, October 2016, http://veriflow.net/_downloads/veriflow-global-survey.pdf EXTERNAL
- ST 2110-10:2017 - SMPTE Standard - Professional Media Over Managed IP Networks: System Timing and Definitions," in ST 2110-10:2017, vol., no., pp.1-17, 27 Nov. 2017 EXTERNAL
- D. R. Kuhn, "Sources of failure in the public switched telephone network," in Computer, vol. 30, no. 4, pp. 31-36, April 1997. EXTERNAL
- E. K. Çetinkaya and J. P. G. Sterbenz, "A taxonomy of network challenges," 2013 9th International Conference on the Design of Reliable Communication Networks (DRCN), Budapest, 2013, pp. 322-330. EXTERNAL
- IETF RFC 1492 [Active*]
- IETF RFC 1918 [Active*]
- IETF RFC 2865 [Active*]
- IETF RFC 3927 [Active*]
- IETF RFC 4271 [Active*]
- IETF RFC 5340 [Active*]
- IETF RFC 6733 [Active*]
- IETF RFC 7404 [Active*]
- IETF RFC 8446 [Superseded*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/10.5594-M001885.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
Thomas Kernen and Nikolaus Kero; Strategies for Securing ST 2059-2 PTP Networks, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019. Available at https://doi.org/10.5594/M001885
Snippet:
Thomas Kernen and Nikolaus Kero; Strategies for Securing ST 2059-2 PTP Networks, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019. Available at https://doi.org/10.5594/M001885
HTML (ISO 690 compliant)
Preview:
Thomas Kernen and Nikolaus Kero; Strategies for Securing ST 2059-2 PTP Networks, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019. Available at https://doi.org/10.5594/M001885
Snippet:
<span class="citation">Thomas Kernen and Nikolaus Kero; <cite>Strategies for Securing ST 2059-2 PTP Networks</cite>, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019. Available at <a href="https://doi.org/10.5594/M001885" target="_blank" rel="noopener">https://doi.org/10.5594/M001885</a></span>
SMPTE's HTML Pub
Preview:
Thomas Kernen and Nikolaus Kero; Strategies for Securing ST 2059-2 PTP Networks, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019
doi: 10.5594/M001885
url: https://doi.org/10.5594/M001885
doi: 10.5594/M001885
url: https://doi.org/10.5594/M001885
Snippet:
<li> Thomas Kernen and Nikolaus Kero; <cite id="bib-10-5594-m001885">Strategies for Securing ST 2059-2 PTP Networks</cite>, SMPTE Meetings and Conferences ( October 2019); SMPTE, 2019 <span class="doi">10.5594/M001885</span> </li>