Cyber-attacks can compromise the functionality of satellites, and that has impacts not only in the military. Satellites are more present in our daily lives than we notice it. They are used by navigation, telecommunication services, Internet access, power networks, phones. Global Navigation Satellite System (GNSS) signals are also used to synchronize financial networks, fleet management, road tax, or tolling, smart roads, connect vehicles, along with ‘safety-of-life’ systems such as air traffic guidance.  

Why are cyber-attacks challenging to prevent?

Cyber-attacks can be very subtle and often difficult to trace, turning it appealing for adversaries. The more we depend on satellite-based technologies, the more harm those attacks can cause.  

Satellites are made with components using different technologies, made by various manufacturers and following quality standards of different countries, which makes them more challenging to protect. Also, they don’t have one entry point; they need to communicate with the ground station. The intricate architecture of space, ground, and RF/optical interfaces potentially causes a unique vulnerability in each access point. Accessing any communication in those networks can be a start for a cyber-attack.  

Another problem is that after launching a satellite, maintenance in hardware, without bringing it back for servicing and updates, is virtually impossible. 

What are the types of cyber threats?  

Some of the cyber threats are attacks on IP addresses, radiofrequency manipulation, supply chain risk, human error, and others, potentially resulting in breach of confidentiality or integrity of downlink data or the satellite being destroyed, disabled, or losing its accuracy.  

Most of the attacks are enabled by human error, the reason why ESA has a cyber training and testing for its employees and partners at the European Space Security and Education Center (ESEC). ESA also regularly monitors cyber-attacks on its ground station infrastructure, the reason why no damage has happened, but it is crucial to ensure the security of space systems. 

Some of those systems, user equipment, and handheld devices were designed without considering cybersecurity. And an appliance with poor security design or poor security management can lead to a network being vulnerable to an attack. 

For the Americans, the IA-Pre program, scheduled to start sometime in 2020, where audition of Satcom providers by a third-party will ensure they meet NIST 800-53 cybersecurity standards set by the National Institute of Standards and Technology. 

What is Resilience?  

Cybersecurity isn’t only about cyber protection. It is necessary to think about cyber resilience and consider that technology is evolving, with artificial intelligence (AI), machine learning (ML), and others. These technologies and tools are also used for cyber-attacks making the risk of a breach always eminent.  

Resilience is the capacity of systems to endure a disruption and operate with minimal impact and recovery time. That can be achieved by shutting off damaged components, switching to similar components or systems, or running with different tactics, techniques, and procedures.  

Space tech is vital in the military and in our daily lives, and it is critical to protect its infrastructure, not only from physical threats in space but also from cyber threats coming from Earth. 

For more in Cybersecurity, click here. Follow us on Linkedin, Twitter, or Facebook to get our updates. 

Article written by Juliane Verissímo - Marketing Department of VisionSpace