By Paul J. Kostek
As national space assets and operations become increasingly integral to global security and economic stability, the threat of sophisticated cyberattacks grows more severe. Understanding and managing commercial space operations is now as critical as addressing other security threats.
With the possibility of unexpected situations emerging at any time, our Critical National Infrastructure (CNI) must be prepared for this new space race. Recent findings from the Ethics + Emerging Sciences Group found that cyberattacks in space are becoming an urgent concern, highlighting an increased need for more proactive approaches to security planning. This will ensure the safety and success of space operations in this evolving landscape.
By examining the current cybersecurity threats to low-earth orbit (LEO) satellites and our broader critical national infrastructure (CNI), we can build our understanding of the new space-cyber frontier and what we must do to defend this expanding attack surface.
A new age of digital threats
The recent CrowdStrike outage nearly brought the world to a standstill, affecting industries like healthcare, travel and global commerce. This raised concerns about the potential impact if bad actors intentionally set out to cause the same failures.
Consider the service disruptions from recent cyberattacks, such as those faced by Seattle Tacoma International Airport, which struggled with check-in and luggage systems due to a targeted attack on its ground-based infrastructure. Now imagine the consequences if a similar attack occurred in space.
If GPS satellites were taken offline or their data was corrupted, the effects on commerce, aviation (both commercial and military) and our daily lives would be significant. As the number of satellite constellations increases, so will the number of potential entry points for threat actors. This increases the likelihood of network hijacking.
Mitigating space-based sabotage and its challenges
As space operations evolve from being government-exclusive to involving commercial operators, the risk of cyberattacks intensifies. While launch vehicles are extensively inspected before being approved for use, payloads are only required to meet physical and environmental standards—like weight, power and temperature. There are no cybersecurity mandates. This leaves them vulnerable to various methods of attack, including electromagnetic, spoofing, jamming or total loss of control. To prevent operational disruption, payload designers must take a comprehensive approach to end-to-end design and incorporate cybersecurity from the outset. Given the increasing number of commercial systems in space, addressing cybersecurity post-design is no longer viable. Ground stations and IoT devices, which often fall under third-party operators, are additional weak points, making these systems even more vulnerable.
Many older satellites lack any security measures, as hacking was not previously considered a significant threat. However, with the upcoming launch of nine new GPS satellites, costing $5.5 billion each, cybersecurity is now essential for their protection. Even lower-cost communication satellites must prioritize security.
Scenario-based solutions
Security must be defined at the start of the design process, alongside risk assessments. This is the optimal time to identify potential scenarios, mitigation strategies and determine whether the risk justifies the cost of protection. Identifying access points and limiting exposure should also be a priority.
Both hardware and software security solutions are needed. Attack scenarios could range from physical collisions intended to destroy vehicles to hijacking a satellite’s control systems to move it out of orbit or jam its signals. Satellites designed without strong security can be weaponized and used against other satellites.
Planned satellite servicing also presents risks, as physical connections for refueling or software updates provide potential access points for hostile actors. Encrypted software will be critical to secure these connections.
Addressing these scenarios involves evaluating satellite replacement costs, launch costs and whether spare satellites or reconfiguration strategies should be available. For instance, if a constellation of 10 satellites loses three, can the mission still proceed?
Security solutions must also account for a satellite’s lifespan, considering whether it’s a short-term (five years or less) or long-term satellite, like those in the GPS constellation.
The future of space defense
Beyond cybersecurity, we must also consider the risk of earth-bound wars extending into space. Blocking communications, observation or navigation satellites would have a major impact on military operations.
While commercial space offers opportunities for businesses, universities and new space nations, it also paves the way for new forms of criminal activity and creates new vulnerabilities. Addressing cybersecurity in all deployed payloads must be a priority.
Read also
Are We Prepared for Cyberthreats in the New Era of Transportation?
