Challenges and New Directions in Securing Spectrum Access Systems

The spectrum access system (SAS) is being deployed as a key component of the emerging spectrum sharing paradigm to address the spectrum crunch facing the U.S. wireless industry. Ensuring security and privacy of this system against potential attacks is a task of paramount importance. In this article, we first introduce the SAS system, describing its three-tier access model, its functional architecture, and the spectrum management protocol. We then provide a comprehensive analysis of a variety of security and privacy attacks that an SAS is vulnerable to, and discuss their countermeasures. We identify key challenges, formalize threat models, and organize the discussion of SAS security into four categories: 1) SAS server security and privacy; 2) citizens broadband radio service device security; 3) security of environment sensing capability; and 4) communication protocol security. Finally, we suggest future research directions for spectrum management security.