Cybersecurity Vulnerabilities in Space Vehicles Explained

Introduction

The changing dynamics and developing ideas are what define the contemporary space industry. The launch of Russian satellites in 1957 marked the start of a new age for civilization, demonstrating that humanity could master space. Until recently, the space industry was dominated by a small number of nations that developed prominent, costly constellations with lengthy operational lifespans. Relevant data on satellites was strictly guarded to impede adversaries' defense capabilities. However, recent technological advancements, faster research and development cycles, and cheaper launch costs have made the space sector a highly valued resource for many organizations. This has sparked private-sector interest and brought a variety of investors and initiatives to the table (Manulis, Bridges, Harrison, Sekar & Davis, 2021). Because of the rapid incorporation of standard modules and components — while making space travel more affordable and widespread — the number of small satellites launched in the United States in 2021 was expected to be around 2,944 ("UCS Satellite Database," 2022). Many firms take greater risks with their satellites, resulting in more innovations. As the scale and scope of space missions evolve, ensuring that systems are secure against the latest technological threats has proved to be a vital part of development.

Similarly, the growth of cyber technologies in the United States has provided incomparable data accessibility. Together, space and cyber technologies have aided the rapid advancement of satellite communications, Global Positioning Systems, space-based intelligence, and weather data fused with global data networks, enabling unprecedented data sharing (Bichler, 2015). The procurement and operations communities have historically regarded information security in space systems as secondary. Many of these technologies remain in the inventory today, having been built on insecure models that leave them vulnerable to cybersecurity threats. This paper addresses the vulnerabilities in space vehicles and ways to mitigate them. Although there are many developing dangers to space, this study concentrates on cybersecurity threats owing to the interconnected structure of corporate and armed forces facilities. Both nation-states and non-state actors are carrying out cyberattacks on space operations. As open-source research on flaws expands, so do the attacks. Inaction is not an option, and all government-critical space technologies must be reinforced against cyber risks.

Overview of Space Systems and the Developing Cyber Threat

Space systems comprise space and ground segments, which communicate through radio frequency signals. The space segment includes satellites or groups of satellites in orbit. Satellites are pieces of technology intended to serve a specific purpose, mounted on a bus that holds the payloads and the accompanying satellite components. The ground segment includes all ground-based features that gather or transmit radio frequency signals, oversee and manage satellites, and distribute payload and telemetry information to remote users (Manulis, Bridges, Harrison, Sekar & Davis, 2021). Ground segments include ground stations that manage task procedures and payload, as well as terrestrial networks that integrate different ground systems and distribute data collected by payloads. Space vehicles launched from the United States require two independent tracking sources to satisfy a range of safety requirements — historically, radar and inertial measurement units.

The Department of Defense, the National Aeronautics and Space Administration (NASA), and corporate enterprises have created disposable launch vehicles capable of sending satellites into orbit. Many space vehicles are designed to carry a particular cargo into orbit. They are composed of numerous sections that separate in succession as the vehicle acquires momentum and orientation and fuel is expended. Governments continuously carry out research and innovation as maintenance and operational support costs increase.

The cyber capabilities of many governments have grown considerably in recent years. Effective cybersecurity plans require organizations to control multiple interconnected principles and actions. Methods for implementing these principles have been developed for many information technology networks, but they remain works in progress for space systems (Bailey et al., 2019). Cyber threats pose a significant and multifaceted risk because of the lack of warning, the speed of attack, the difficulty of attribution, and the ramifications of executing a proportionate response.

There are numerous hazards to the health of space systems, ranging from the harsh conditions of outer space to deliberate threats carried out by individual actors. While some effects are manageable and reversible, others are catastrophic, rendering a system inoperable (Matei, 2021). The pillars of cybersecurity are availability, confidentiality, and integrity. Initially, many orbital technologies — like all telecommunications — comprised analog equipment that offered fewer opportunities for hackers due to an absence of software coding flaws and restricted casual access. However, as technologies have improved, advanced space assets have become increasingly digitized, making them vulnerable to attack by multiple countries and organized criminal groups. According to Bailey et al. (2019), government assets are not the only targets; the military's dependence on commercial space systems to augment bandwidth means that cyberattacks on commercial space systems are also a growing concern. The increasing pace at which hacker capabilities advance makes cybersecurity of space systems a priority.

Space Vehicle Attack Surfaces

Traditionally, space vehicles are components that interpret, store, and transmit information, serving as an attack surface. Many spacecraft incorporate hardware and software to operate in space. While the software is developed on the ground, it is vulnerable to the same dangers as traditional integrated systems. The spacecraft itself can be compared to a space-based Internet of Things device. Many adversaries seek to exploit numerous vulnerabilities to gain access to and leverage space capabilities. The multiple components that comprise a space vehicle are interrelated and can be used to an adversary's advantage. Adversaries are expected to employ attack methods and patterns for space vehicles similar to those used against conventional technology infrastructures.

Flight software is targeted more frequently than other subsystems. Flight software-based attacks have been observed to extend throughout entire missions (Tsamis, Bailey & Falco, 2021). Because flight software is reprogrammable during the mission, hackers have opportunities both during ground development and post-launch operations to introduce malicious code. Hardware-based threats are generally limited to the pre-launch phase, where widespread direct physical access is possible.

Conclusion

Space assets are the virtual platforms that enable the most essential infrastructure in the United States. The possibilities of outer space are anything but alien — whether in the form of protecting life from natural disasters, promoting global transport and planning systems, or deepening our understanding of the universe, space affects the lives of everyone. The relationship between outer space and cybersecurity is still evolving, and the decisions made now will affect future generations. Many researchers, legislators, and developers are deeply concerned about the cybersecurity of platforms, yet many neglect to incorporate the space assets that enable those networks. As space vehicles continue to grow in complexity, they present multiple segments that can be attacked by malicious actors — from the communications linking the ground and space system architecture to the space segment itself.

With the number of satellite launches increasing, space vehicles will become an increasingly attractive target for individuals with diverse motivations and capabilities. By identifying existing vulnerabilities, space asset firms must not wait for legislators to mandate cybersecurity measures. They must take the necessary actions to safeguard their assets even in the absence of policy direction.

Bailey, B., Speelman, R., Doshi, P., Cohen, N., & Wheeler, W. (2019). Defending spacecraft in the cyber domain. Aerospace Center for Space Policy and Strategy.

Bichler, S. F. (2015). Mitigating cyber security risk in satellite ground systems. Air Command and Staff College, Maxwell Air Force Base.

Falco, G. (2018). The vacuum of space cyber security. In 2018 AIAA SPACE and Astronautics Forum and Exposition (p. 5275).

Hutchins, R. (2016). Cyber defense of space assets (pp. 1–18). Tufts School of Engineering.

Manulis, M., Bridges, C. P., Harrison, R., Sekar, V., & Davis, A. (2021). Cyber security in new space. International Journal of Information Security, 20(3), 287–311.

Matei, V. (2021). Cybersecurity analysis for the internet-connected satellites.

Pavur, J. (2021). Securing new space: On satellite cyber-security [Doctoral dissertation, University of Oxford].

Suloway, T., Kordella, S., & Visner, S. S. (2020). An attack-centric viewpoint of the exploitation of commercial space and the steps that need to be taken by space operators to mitigate each stage of a cyber-attack. In ASCEND 2020 (p. 4015).

Tsamis, N., Bailey, B., & Falco, G. (2021). Translating space cybersecurity policy into actionable guidance for space vehicles. In ASCEND 2021 (p. 4051).

UCS Satellite Database. (2022). Union of Concerned Scientists. https://www.ucsusa.org/resources/satellite-database

Zhang, M. (2020). National security space launch.