Back

Outer Space: The new frontier for next—gen cyber weapons

From the time humans began to expand their influence beyond the boundaries of Earth’s atmosphere, counter-space programs have demonstrated that dominating the space domain is of notable concern.

The utilization of artificial satellites for critical functions, from telecommunications and financial infrastructure to national security and advanced research, has made them a new target for cyber-attacks. Advanced Persistent Threat (APT) groups, both state-sponsored and independent, pose a major threat to these interstellar computing systems that play a key role in our critical infrastructure. It is imperative that the critical nature of these satellites be acknowledged by regulators and appropriate security measures be implemented by vendors to mitigate the consequences of a compromise.

A major factor as to why satellites are such a unique attack vector is the way in which they communicate with earthbound systems. Oftentimes, whether due to age or lack of computational resources, uplink and/or downlink data streams may be transmitted via openly accessible and unencrypted network protocols. The absence of onboard authentication mechanisms raises further security concerns, which can result in unsecured transmission of data, allowing anyone to freely capture and decode transmissions. Currently, the oldest satellite still in operation was deployed in 1958, a full 25 years before the birth of the Internet. Due to variables such as age, cost, complexity, or size, many satellites have limited memory and processing capacities. These limitations render a satellite more susceptible to denial-of-service attacks, restrict their encryption capabilities, and fundamentally compromise its security.

Unintended remote communication with satellites can result in devastating consequences, such as manipulating their orbit, manipulating or stealing the critical data that they process and transmit, or even shutting them off. An additional concern is the potential to gain a foothold to the sensitive networks connected to a compromised satellite which could allow an attacker to pivot within or disrupt the network.

Cyberattacks targeting critical infrastructure have long been a major concern, particularly in the context of cyberwarfare. During the initial stages of the Russian invasion of Ukraine in February 2022 for example, a major satellite network was targeted. Specifically, Viasat's KA-SAT network, which provides high-throughput broadband internet services throughout Europe and the Middle East, fell victim to a cyberattack believed to be orchestrated by Russia. Using a novel strain of wiper malware known as "AcidRain," attackers remotely erased modems and routers that connect the satellite networks to the ground, resulting in the disruption of internet access for those using the network.

While internet access may seem like a relatively minor inconvenience, the Viasat incident highlighted how serious network disruptions can be for civilians and militaries alike, particularly in situations where access to information and communication is vital. As more systems become interconnected and dependent on internet connectivity, the risk of cyberattacks on critical infrastructure will continue to increase, emphasizing the need for robust cybersecurity measures.

Houston, We Have a Problem

It is undeniable that humanity will continue to push the boundaries of exploration and expand into the interplanetary domain. As technology advances according to Moore's law, our systems will inevitably become smaller, less costly, and more powerful, facilitating this expansion. Satellites in orbit are no different from the computer infrastructure on the ground, and it is imperative that the security of these systems improves on par with other technological advancements.

Updating satellite systems incurs costs that stakeholders may not be willing to bear. However, their growing proliferation highlights the need for increased awareness and willingness by stakeholders to take on the necessary cost of securing these systems. To safeguard our future, it is crucial that we prioritize building secure satellite technologies through collective efforts. Satellite security will take a large and unified effort from space faring nations and corporations as they develop their systems to meet lagging regulatory requirements and safety protocols. However, due to the strong relationship between profitability and investment, these efforts are already beginning to take place as outer space becomes more commodified.

Prospective Analysis

The continued investment in developing space-bound technologies provides great hope for our future; As space agencies and corporations alike embark on their new-found missions, humankind should expect to benefit from a more secure and advanced technological ecosystem.

Securing satellite systems is crucial and far from impossible. We look at the different function areas that need to be addressed:

Onboard Systems and Configuration

• Conduct ongoing monitoring of onboard systems, ensuring that fallback plans and backup systems are tested and ready to be deployed; and
• Ensure that critical onboard technologies will not degrade over time leading to system fault and downtime.

Uplink and Downlink Communication

• Properly secure all communication protocols, technologies, and algorithms. It is fundamentally important to encrypt all communication using the strongest encryption algorithms necessary for your application;
• Implement and maintain strong authentication mechanisms or protocols to verify the identity of communicating parties; and
• Provide ongoing and immutable software updates to onboard systems and protocols.

Ground Infrastructure

• Ensure ground stations have strong physical security mechanisms in place. These could be in the form of physical barriers, surveillance cameras, mantraps, alarms, security guards, etc.; and
• Network segmentation will minimize the impact of a security incident by limiting the footholds an attacker would have once access is gained.

Conclusion

Technology, exploration, and communication are characteristics of the human condition and allow us to take part in an interconnected society. Without our advanced tools and technologies, we would be, in the words of Albert Einstein, little more than “an advanced breed of monkeys on a minor planet of a very average star.”

Works Cited;  

Acton, James, and Thomas MacDonald. “Nuclear Command-and-Control Satellites Should Be off Limits.” Defense One, Defense One, 10 Dec. 2021, https://www.defenseone.com/ideas/2021/12/nuclear-command-and-control-satellites-should-be-limits/187472/.

Bartels, Meghan. “Why Satellites Need Cybersecurity Just like You.” Space.com, Space, 10 Dec. 2018, https://www.space.com/42658-cybersecurity-for-satellites.html.

Betz, Eric. “Vanguard 1: Earth's Oldest Artificial Satellite That's Still in Orbit.” Astronomy.com, 9 July 2020, https://astronomy.com/news/2020/07/vanguard-1-earths-oldest-artificial-satellite-thats-still-in-orbit#:~:text=The%20Vanguard%20spacecraft%2C%20the%20oldest,%2C%20Florida%2C%20back%20in%201958.&text=Today%2C%20there%20are%20more%20than,the%20planet%20as%20space%20junk.

“Case Study: Viasat Attack: CyberPeace Institute.” Viasat Attack | CyberPeace Institute, https://cyberconflicts.cyberpeaceinstitute.org/law-and-policy/cases/viasat.

“Cyber Concerns for the Satellite Sector.” Archon Secure, https://www.archonsecure.com/blog/satellite-cybersecurity.

Eddy, Max. “Want to Hack a Satellite? It Might Be Easier than You Think.” PCMAG, PCMag, 7 Mar. 2019, https://www.pcmag.com/news/want-to-hack-a-satellite-it-might-be-easier-than-you-think.

“Electronic and Cyber Warfare in Outer Space.” UNIDIR, https://unidir.org/publication/electronic-and-cyber-warfare-outer-space.

“Space Based Assets the New Critical Infrastructure?” Purview, 7 Jan. 2021, https://purview.dodlive.mil/Home/Story-Display-Page/Article/2618118/space-based-assets-the-new-critical-infrastructure/.

StartUs Insights. “Top 10 Satellite Trends & Technologies for 2022.” StartUs Insights, 7 Sept. 2022, https://www.startus-insights.com/innovators-guide/satellite-trends-innovation/.