A system and method for detecting a global navigation satellite system (GNSS) spoofing attack on a protected vehicle. The method includes receiving at least one GNSS signal; identifying a plurality of characteristics associated with at least one received GNSS signal; analyzing the plurality of characteristics; and determining, based on the analysis of the identified characteristics, whether the at least one GNSS signal is a spoofed signal.