Sunday 22 December 2024
Home Blog Page 9

Introduction to Cybersecurity for Commercial Satellite Operations: Draft NISTIR 8270

By
François Quiquet
-
1

Space operations are vital to advancing the security, economic prosperity, and scientific knowledge of the Nation. However, cyber-related threats to space assets and supporting infrastructure pose increasing risks to the economic promise of emerging markets in space.

NIST is seeking comments on Draft NISTIR 8270, Introduction to Cybersecurity for Commercial Satellite Operations, which describes cybersecurity concepts with regard to crewless, commercial space operations. The document is an information reference for managing cybersecurity risks and considering how cybersecurity requirements might coexist within space vehicle system requirements. NIST is specifically interested in feedback on the document’s overall approach, the example use case, and the identified controls for the use case. (Note that the use case is only notional for illustrative purposes and is not intended to be a set of specific cybersecurity recommendations.)

A public comment period is open through August 13, 2021. Based on feedback for this publication, NIST will also consider the utility of publishing similar reports discussing other areas of space operations as needed. See the publication details for a copy of the draft and instructions for submitting comments.

Some figures in the draft

Update (22 july 2021)

Comment Period Extended for Draft NISTIR 8270, Introduction to Cybersecurity for Commercial Satellite Operations

NIST has extended the due date to October 13, 2021, for providing comments on Draft NISTIR 8270, “Introduction to Cybersecurity for Commercial Satellite Operations.” A copy of the draft and instructions for submitting comments are available here.

CNSSI 1253 and NIST released the Space Platform Overlay

By
François Quiquet
-
0

The CNSSI 1253 (Committee on National Security Systems Instruction No. 1253) has released (Attachment 2) the Space Platform Overlay as a companion of the NIST SP 800-53 controsl guide.

Space Overlay is a set of specific guidances and requirements for space. Space Overlay can be used as Security Baseline on some space systems studies.

But what is a security controls overlay ?

My explanation about an overlay is that an overlay is a customisation of security controls applied to a specific domain, in this case to space domain, which uses the NIST 800-53 controls.

To be more precise  : “A specification of security controls, control enhancements, supplemental guidance, and other supporting information employed during the tailoring process, that is intended to complement (and further refine) security control baselines. The overlay specification may be more stringent or less stringent than the original security control baseline specification and can be applied to multiple information systems.”

Thank’s to NIST for this explanation about security controls overlay (more here). Basically, the overlay completes the baseline.

Florent Rizzo from Cyberinflight written an article with a mindmap of the Space Overlay to have a better overview.

Space Overlay Overview (Copyright Cyberinflight – Florent Rizzo)

Brandon Bailey from Aerospace also written a White Paper (Translating Security Principles for Space Systems to Existing Standards) than mentioned the Space Overlay. The following is an extract from this text (Download Paper – PDF – 15 pages – Oct 1, 2020)

  • Government programs and/or organizations have attempted to take portions of NIST governance and apply it to space systems. The most notable attempt at this was with CNSSI 1253 and the generation of the space overlay.
  • The space overlay was an attempt to take an existing control set and create an overlay specific for the spacecraft as well as the launch vehicle. Overlays take something that exists (CNSSI 1253 / NIST 800-53) and determine what applies and does not apply.
  • The space overlay takes the existing control set and articulates what could be applicable to the spacecraft. The important distinction in this approach is the approach is not risk or threat-informed and is very generic in nature.
  • The space overlay has a purpose, but a better approach which aligns with the direction NIST is moving toward in revision 5 of 800-53 is creating a spacecraft baseline.
  • The baseline approach starts from a clean sheet of paper and establishes a specific baseline. With this approach, designers/engineers will take the master catalog (i.e., CNSSI 1253 / NIST 800-53 and all the enhancements) and generate their Program/Mission baseline.
  • While baseline generation can be labor intensive, it will result in tailored controls/requirements for a particular mission.
  • In an effort to promote a threat-informed baseline approach, the engineers need to understand the applicable threats to aid in control derivation.
  • To accomplish this, a generic threat library can be used to help identify the threats needing mitigated

The following is an extract ftom the Space Platform Overlay

“This overlay applies to information technology (IT) components of unmanned space platforms that support national security missions, during the life cycle phase of the space platform when it is operating in space (whether experimental1 or operational). This overlay does not apply to ground or user segments or to the launch segment, nor does it address the space platform while it is in development or testing on the ground. The assumptions made in this section about the applicable unmanned space platforms do not necessarily hold true for manned space platforms or the launch, user, or ground segments.”

The main problème with the Space Overlay (which is a great document btw) is that is does not covers the development and testing phases, it only covers pre-op, launch and after launch phases. As mentionned in the document, Space Platform Overlay does not apply to ground or user segments or to the launch segment, nor does it address the space platform while it is in development or testing on. It only apply on unmanned space platforms.

How to address the ground issue ?

We are lucky because Brandon Bailey addressed this issue in the “Re-defining Success of Ground Cyber Assessments” presentation.

From the MITRE Att&CK framework and the right TPPs (Tactics, Technics and Procedures), Brandon Bailey built a specific Ground System TTPs to list some attack paths based on known TTPs used by hackers.

Example Ground System TTPs (Copyright Brandon Bailey)

Need to go futhermore ?

To go futhermore the concept of MITRE ATT&CK framework applied on specific domain, you can also have a look on the MITRE ATT&CK for ICS Matrix.

The MITRE ATT&CK for ICS Matrix is an overview of the tactics and techniques described in the ATT&CK for ICS knowledge base. It visually aligns individual techniques under the tactics in which they can be applied.

The MITRE ATT&CK for ICS matrix (Source: https://collaborate.mitre.org/attackics/index.php/Main_Page )

Below is the mapping of Stuxnet attack on the ATT&CK for ICS matrix (Than’ks to Airbus Cybersecurity). “Mapping Stuxnet to the ATT&CK for ICS matrix, as shown in figure 3, quickly shows how complex this attack was. Business risk owners can now identify which techniques to focus on if they need to minimise the risk from strikes like Stuxnet.”

Mapping of Stuxnet on the ATT&CK for ICS matrix (Source: https://airbus-cyber-security.com/mitre-attck-for-ics-everything-you-need-to-know/)

Space Cyber Security Watch N°4 (June 14, 2021)

By
François Quiquet
-
0

 

PDF VERSION IS AVALAIBLE HERE

Find below the new Space Cyber Security Watch N°4 (June 14, 2021). In this paper, you will find everything that has caught our attention since the last time : news, articles, papers, Space CTI, videos, webinars, events, attacks, podcats … This work is not exhaustive, so comments and observations are welcome.

Contents

Articles

May 2021

June 2021

  • (EN) House bill would designate space as critical infrastructure. Let’s do this! Space needs to be designated Critical Infrastructure
  • (EN) General Atomics Partners with Space Development Agency to Conduct Space-to-Air Optical Communication Experiment. SDA and General Atomics have expanded the Laser Interconnect and Networking Communication System (LINCS) program to include space-to-air optical communication demonstrations. SDA and GA will now establish and evaluate links between space and an airborne MQ-9 Reaper, in addition to the planned space-to-space and space-to-ground activities. This experiment leads to a fight where airborne assets can fly without relying on radio frequency, providing Low Probability of Intercept/Low Probability of Detection and increasing capabilities for warfighters around the world!
  • (EN) SDA & DARPA: June Demos To Prove Optical Sat Link Capability. “Getting a laser beam on a spacecraft to point to a laser receiver on another spacecraft accurately enough with the right power levels, the right waveforms, etc.,– it’s not an easy thing,” said General Atomics VP Nick Bucci.
  • (EN) General Atomics to Demo SDA Space-to-Air Optical Communication. General Atomics‘ electromagnetic systems group has received a contract to demonstrate optical communication between a low-Earth orbit satellite and an unmanned aerial vehicle for the Space Development Agency.
  • (EN) SpaceChain Sends Ethereum Cryptocurrency Tech into Space. SpaceChain has successfully sent a blockchain-enabled payload into space on Thursday aboard a SpaceX Falcon 9 rocket launched from NASA‘s Kennedy Space Center.
  • (EN) US Military Places a Bet on LEO for Space Security. U.S. Defense Department agencies are working with a who’s-who of military contractors, commercial satellite operators, and technology companies to finally demonstrate the feasibility of a proliferated constellation of satellites in Low-Earth Orbit (LEO).
  • (EN) Hacking space: How to pwn a satellite. Hacking an orbiting satellite is not light years away – here’s how things can go wrong in outer space
  • (EN) Momentus Reaches National Security Agreement, Co-Founders Divest from Company. Momentus has made a concrete step forward with a after a turbulent few months dealing with U.S. national security concerns with the business. The in-space transportation company announced Wednesday that it has signed a National Security Agreement (NSA) with the U.S. Department of Defense and Department of the Treasury on behalf of the Committee on Foreign Investment in the United States (CFIUS).

Papers

  • (EN) Autonomous Cyber Capabilities under International Law : New Book on autonomous cyber capabilities under International Law now available in CCDCOE Library
  • (EN) On Detecting Deception in Space Situational Awareness (James Pavur, Ivan Martinovic). This paper has been accepted for the 16th ACM ASIA Conference on Computer and Communications Security (ACM ASIACCS 2021), 7-11 June 2021, Virtual event. This paper offers one of the first considerations of defense techniques against SSA deceptions. Building on historical precedent and real-world SSA data, they simulate an attack whereby an SSA operator seeks to disguise spy satellites as pieces of debris.
  • (EN) New ESPI Yearbook edition. The Yearbook on Space Policy is an annual publication of the European Space Policy Institute (ESPI). p.93 you can find a small section on GSaaS (Ground Station as a Service).
  • (EN) An overview of protected satellite communications in intelligent age. Our focus is placed on the critical technologies and practical applications, and finally discuss remaining challenges and look forward to the future research directions. It is undoubted that the protected SatCom is one of the most important systems in military communications, both now and in the future.

Videos

  • (EN) Locked Shields 2021. Several Space ISAC members participated in Locked Shields 2021 and threats to space injects were considered because of their involvement. The largest and most complex international live-fire cyber defence exercise in the world, Locked Shields 2021 was organised by NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) from April 13th to 16th. The exercise included new cyber-physical systems and integrated technical and strategic elements, enabling participating nations to practice the entire chain of command in solving a large-scale a cyber incident. This year was unique from other iterations of Locked Shields in that for the first time the organisers will also be participating remotely rather than gathering in Tallinn as they have done in previous years.
  • (EN) Space Iceland May meeting with Berenike Vollmer, researcher on Cybersecurity Gaps.
  • (EN) CYSAT ’21: C. Beek & E. Carroll “Space 4.0: Another cybercriminal portal?”. Space 4.0 encompasses all recent trends such as GSaaS, SataaS or edge computing making modern satellites (almost) an extension of the cloud!
  • (EN) On Detecting Deception in Space Situational Awareness. Presentation Video from James Pavur (Oxford University) for ACM ASIACCS 2021

Webinars

Podcasts

  • (EN) Mars Goes to Shell. About this Episode : Tim Canham, Mars Helicopter Operations Lead at NASA’s JPL joins us again to share technical details you’ve never heard about the Ingenuity Linux Copter on Mars. And the challenges they had to work around to achieve their five successful flights.
  • (EN) Space Policy Pod: Episode 21 with Sean O’Keefe (Former Administrator, NASA). Given the current real-world challenges confronting all of us, AIAA has joined the MITRE Corporation and the U.S. Chamber of Commerce to produce this podcast series to examine events and ideas affecting the space sector.

Past Events

Upcoming Events

This work is not exhaustive, so comments and observations are welcome.

Space Cyber Security Watch N°3 – 31 May 2021

By
François Quiquet
-
1

PDF VERSION IS AVALAIBLE HERE

Find below the new Space Cyber Security Watch No 3. In this paper, you will find everything that has caught our attention since the last time : news, articles, papers, Space CTI, videos, webinars, events, attacks, podcats … This work is not exhaustive, so comments and observations are welcome.

Contents

Attacks on Space Systems

Articles

February 2021

  • (EN) Red Flag 21-1 integrates space, cyberspace for joint all-domain operations training – Red Flag 21-1 is an exercise with Space-unit participants including blue, red and white players from the United States Space Force, U.S. Army Space and Missile Defense Command, and allied nations combat air forces. During the exercise, they have employed “space electronic warfare capabilities that support full-spectrum national security objectives, along with offensive cyber capabilities across adversary data networks affecting that network’s ability to pass data or function properly”.

March 2021

  • (EN) Viasat Opens New Cyber Security Facilities in the UK – “Viasat‘s U.K. subsidiary opened a new Network Operations Center (NOC) and Cyber Security Operations Center (CSOC) in Aldershot, United Kingdom. The new facilities will support defense, government, and commercial organizations often targeted by increasingly sophisticated cyberattacks”.
  • (EN) SecDef briefed on military space programs, threats to satellites – “Defense Secretary last week received a detailed briefing on DoD space programs and national security threats in the space domain. This was his first high-level briefing on space issues since taking office”

April 2021

May 2021

  • (EN) CyberSatDigital Speakers: “Red-Teaming” Helps Industry Understand, Detect Evolving Threats – Red team exercises – or, simulated cyber attack scenarios run by internal IT groups and/or external third parties – can help satellite companies keep pace with constantly evolving cyberattacks, according to speakers on CyberSatDigital’s opening panel on Monday.
  • (EN) New Space Players Take Stock of Headline-Grabbing Security Breaches – Vice president of Corporate Engineering and Security for Planet, laid out the stark truth of cybersecurity threats during the CyberSat Digital event on Tuesday, May 11. New Space players on the panel took stock of cybersecurity threats in light of the ransomware attack on Colonial Pipeline, which has disrupted the gasoline supply on the East Coast
  • (EN) NASA OIG: NASA’s Cybersecurity Readiness – Given its high-profile mission and broad connectivity with the public, educational institutions, and outside research facilities, NASA presents cybercriminals a larger potential target than most government agencies.
  • (EN) SolarWinds hack ‘a big wakeup call,’ NASA’s human spaceflight chief says – NASA leaders know that the space agency, with its huge stores of advanced technical data, is an inviting target for hackers and therefore take significant measures to head them off
  • (EN) CyberInflight is now a proud member of the Space ISAC – In April 2021, CyberInflight became the first french company of Space ISAC.
  • (EN) CCSDS Security Working Group – Spring 2021 : CCSDS Spring 2021 Meetings has been hold remotely (17-18 May 2021) in a Virtual format at Huntsville Alabama (USA). Meeting materials can be found here.
  • (EN) The Space Force needs deterrence and war-winning capabilities – The USSF lacks key elements that are necessary to empower effective deterrence on orbit: sufficient offensive and defensive means to achieve its statutory functions as an armed force. Credible deterrence requires kinetic and non-kinetic capabilities, political will to use those systems, and the clear communication of a specified threat of force linked to a specific action (i.e., attack) that the U.S. wants to prevent. The armed forces behind the threat must be credible in the mind of the adversary.
  • (EN) Aerospace Cybersecurity Capture The Flag 2021 – During the 2021 RSA Conference, Aerospace Village hosted a Cybersecurity Capture The Flag (CTF). The objective of the Aerospace Cybersecurity CTF is to highlight current cybersecurity issues in the aerospace domain using a friendly competition and teaching environment. During the event, challenges and puzzles are solved and “flags” are retrieved. Congrats to the #AerospaceVillage CTF winner @mztropics. CTF platform is now closed.
  • (EN) Message from Steve Lee (AIAA) : If you missed the Embry Riddle Aerospace Cybersecurity Capture the Flag (CTF) at SCITECH 2021, or at the RSA Aerospace Village Sandbox on Monday, 17 May–or would like to explore it some more–the CTF is available online at the RSA Sandbox hosted by Aerospace Village. Check out the challenges and test your mad aerospace cybersecurity skillz! Sorry but now, CTF platform is now closed.
  • (EN) Biden Administration Likely Retaining Trump Doctrine on Cybersecurity in Space – Cybersecurity in space will remain a priority under the Biden administration. Great work from Jaisha Wray and Brian Scott and the crew from the National Space Council.
  • (EN) MoU Signed Between AIAA + Space ISAC For Collaboration On Space Cybersecurity Concerns – The American Institute of Aeronautics and Astronautics (AIAA) and the Space Information Sharing and Analysis Center (Space ISAC) have entered into a Memorandum of Agreement (MOU) enabling the two organizations to collaborate on aerospace and space cybersecurity endeavors.
  • (EN) AIAA and Space ISAC team up to defend space from cyber attack – The two organizations will cooperate to build the knowledge foundations of space cybersecurity. The Space ISAC brings cybersecurity situational awareness and operational excellence and AIAA offers its long history of convening and promoting aerospace expertise, knowledge, and leadership.
  • (EN) Germany affirms the creation of its Space Command under the responsibility of the Bundeswehr – Germany is following the trend to centralize its military space activities. By fall 2021, the German armed forces are set to establish a Space Command under the responsibility of the German Air Force (PDF – 27 pages – In German)
  • (EN) CYSAT ’21, a space cybersecurity conference – Full Keynotes and Presentations have been released in videos
  • (FR) La guerre de l’espace renforce l’activité du Centre spatial de Toulouse – Le campus du CNES à Toulouse va accueillir le nouveau commandement de l’espace qui opérera les moyens spatiaux de la défense nationale. Celui-ci réunira 400 personnes dans un bâtiment dédié en 2025, formées par le CNES. Sa création a favorisé aussi la venue du futur Centre d’excellence de l’Otan pour le domaine spatial.
  • (EN) Space Organizations Partner To Boost Cybersecurity – Two prominent aerospace industry groups are cooperating on cyber information sharing, awareness, education, and outreach to improve the security of space operations. The agreement between the American Institute of Aeronautics and Astronautics and the Space Information Sharing and Analysis Center comes at a time when recent cyber incidents in other industries have highlighted a deficit of info sharing.
  • (EN) JUST IN: Space Force Wants More Cyber Teams – The Space Force is in talks with Cyber Command and the Air Force to bring more specialized cyber personnel into the fold, said the deputy commander of Space Operations Command
  • (EN) The Space Platform Overlay – Have you heard about Space Platform Overlay ? Government programs and organizations have attempted to take portions of NIST governance documents and apply it to space systems. Space Platform Overlay takes the existing control sets (such as the CNSSI No. 1253 and the NIST 800-53 Rev. 5) and articulates what could be applicable to the spacecraft.
  • (EN) EUSPA, the new EU Agency for the Space Programme – The adoption of the Regulation establishing the new EU Space Programme on April 27 marks a new beginning for the EU Space Programme and for the European GNSS Agency (GSA), which has now officially evolved into EUSPA, with an expanded mandate and new responsibilities.
  • (EN) It’s official: EUSPA – EU Agency for the Space Programme is here (Video) – EUSPA provides safe and performant space services, enabling synergies, EU innovation, sustainability, and security. Under the EU Space Regulation, EUSPA’s mandate includes EU Space Programme security accreditation.
  • (EN) EUSPA: We are hiring – The Security Department is loooking for Security Risk Engineer, Service Facilities Security Engineer, Service Security Engineer

Papers

Videos

Webinars

  • (EN) June 16, 2021 : Space Resilience for Automakers – Space ISAC and the Center for Automotive Research (@cargroup) are putting on a webinar on Space Resilience for Automakers on 16 June at 12 MDT!
  • (EN) June 1, 2021 : Reducing Space Threats: A Resolution, Volume 2 – In response to UN Resolution 75/36, UN Member States and other key stakeholders were invited to submit their views on threats to space sustainability, what could be norms of behaviour, and how the multilateral community should move forward.

Past Events

  • (EN) May 25 – 28, 2021 : CyCon 2021, the 13th International Conference on Cyber Conflict – Adapting to the new reality, CyCon 2021 will provide a virtual meeting point for decision-makers, opinion-leaders, law and technology experts from the governments, military, academia and industry. CyCon is organised by the NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE)
  • (EN) “Cyber, Space, Cubed” panel at the CyCon2021 – Erin M. Miller (Executive Director, Space ISAC) and Ryan Speelman (Principal director for the Cyber Security Subdivision at the Aerospace Corporation)  hold a session at CyCon 2021 for the “Cyber, Space, Cubed” panel.
  • (EN) James Pavur at the CyCon2021 – James Pavur hold a session by presenting his new paper “On Small Satellites, Big Rockets, and Cyber Trust”, as part of a panel NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE)’s CyCon2021 conference. Definitely check it out if you’re interested in launch vehicle and CubeSat cyber security.

Upcoming Events

  • (EN) September 1 – 3, 2021 : Geopolitics and Global Futures Symposium 2021. The 2021 Geopolitics and Global Futures Symposium is now open for applications! Module 1 is about « The Future of Outer Space Security »
  • (EN) October 5 – 7, 2021 : CyberSatGov – To bring together the satellite community with the government and military markets to have a comprehensive, progressive discussion about cybersecurity.
  • (EN) October 19 – 21, 2021 : 11th IAASS conference : Managing Risk in Space – The 11th IAASS Conference “Managing Risk in Space”, organized in cooperation with the Japan Aerospace Exploration Agency (JAXA) is an invitation to reflect and exchange information on a number of space safety and sustainability topics of national and international interest.
  • (EN) October 25-29, 2021 : IAF’s IAC 21 in Dubaï – 72nd International Astronautical Congress 2021 (Dubai, United Arab Emirates) will have two security sessions :
    • D5 is 54th IAA Symposium on Safety, Quality and Knowledge Management in Space Activities (D5.4 will be more technical : Cybersecurity in space systems, risks and countermeasures)
    • E9 is IAF Symposium on Space Security (E9.2 is more strategic and legal focused : Cyber-based security threats to space missions – establishing the legal, institutional and collaborative framework to counteract them)
    • Papers have been selected and the program will be published shortly

This work is not exhaustive, so comments and observations are welcome.

Space Cyber Security Watch N°2 – 17 May 2021

By
François Quiquet
-
0

PDF VERSION AVALAIBLE HERE

Find below the Space Cyber Security Watch No 2. In this paper, you will find everything that has caught our attention since the last time : news, articles, papers, Space CTI, videos, webinars, events, attacks, podcats …

This work is not exhaustive, so comments and observations are welcome.

Contents

List of new Articles

January 2021

February 2021

April 2021

May 2021

Some good Papers

  • (EN) Space Threat Assessment 2021 (Aerospace Security). The purpose of this annual report from the CSIS Aerospace Security Project is to aggregate and analyze publicly available information on the counterspace capabilities of other nations, primarily China, Russia, Iran, North Korea, and India
  • (EN) Mitigating Cyber Security Risk in Satellite Ground Systems. Satellite ground systems represent an often neglected aspect of cyber security when dis-cussing Air Force and Department of Defense cyber vulnerabilities. An increasing amount of cyber security research and attacks focus on space ground systems in the form of satellite control, satellite communications terminal hacking, and GPS spoofing. Public evidence exists demonstrating nation-state adversary willingness and intent for attacking these systems.

Webinars and past events to review

Upcoming Events

Past Events

  • (EN) May 10 – 12, 2021 : CyberSatDigital – How to identify bad actors, neutralize risks, and thwart threats on our assets in the satellite ecosystem.

Space Security Challenge 2021: Hack-A-Sat 2 is back to hack an on-orbit US satellite

By
François Quiquet
-
0

The U.S. Air and Space Forces in collaboration with the security research community opened registration May 4 for the qualification round of the second annual Space Security Challenge: Hack-A-Sat satellite hacking challenge.

This virtual competition enables security researchers of all levels to focus their skills and creativity on solving cyber security challenges of space systems and incentivizes innovation in securing these systems.

The Space Security Challenge 2021: Hack-A-Sat 2 begins with a Qualification Event that takes place June 26, 10 a.m. EDT – June 27, 4 p.m. EDT. Teams will compete in a Jeopardy-style format, earning points based on speed and accuracy, for a chance to win one of ten prize packages that include $10,000.

The top eight teams from the qualifying round advance to an attack and defense Capture-the-Flag-style Hack-A-Sat 2 Final event, in which teams defend their satellite system while employing offensive measures on their opponent’s systems. Geared toward security researchers who have more advanced technical knowledge of space systems, this final event takes place Sept. 17, 6 p.m. EDT – Sept. 19, 6 p.m. EDT. The top-three-finishing teams receive $50,000 for first place, $30,000 for second place and $20,000 for third place.

Last year’s Hack-A-Sat 1, the inaugural Space Security Challenge, drew more than 2,000 teams made up of more than 6,000 individuals, who were able to connect, learn and hone their skills in this first-of-its-kind, fully-immersive contest experience. Among these teams were the world’s best hackers, who, during the final round, championed a first-of-its-kind on-orbit satellite hacking challenge.

“The first Hack-A-Sat was a tremendous success in bringing together a diverse group of government, commercial, and private organizations and individuals to test and develop cybersecurity solutions for our unique space networks,” said Lt. Gen. John F. Thompson, U.S. Space Force’s Space and Missile Systems Center commander.

As satellites provide the entire world with needed data transmission for capabilities like GPS and credit card transactions, the Departments of the Air & Space Force embraces the benefit of ethical hacking to advance cyber and space technology for both the military and industry.

“The security and cyber-resiliency of our on-orbit systems is an absolute necessity as we look to ensure the peaceful development of the global commons of space over the coming decades,” Thompson said. “This required a multitude of specialties, so partnerships across the entire professional cybersecurity spectrum are vital to developing the next-generation of secure space systems.”

Registration for the Qualifying Event is open to the public. To register, find rules and eligibility, and sign up to stay informed about all contest updates, visit hackasat.com.

Les start-ups et PME spatiales s’allient pour positionner la filière NewSpace française en leader mondial

By
François Quiquet
-
0

Une nouvelle alliance française dans le newspace vient de se créer. Alliance NewSpace France fait l’annonce de sa création ci-dessous. Il s’agit d’une initiative lancée par une vingtaine de PME et start-ups spatiales françaises, pour faire rayonner la filière dans le monde entier et créer des leaders du secteur spatial de demain. L’Alliance est ouverte à tous les acteurs du NewSpace.

Les entreprises françaises du NewSpace se réunissent sous la bannière de l’Alliance NewSpace France pour atteindre une masse critique afin de faire rayonner l’incroyable dynamique des start-ups spatiales françaises.

Arrivée d’acteurs privés, accélération, innovations, nouvelles technologies, nouvelles applications, nouveaux acteurs : le secteur spatial est aujourd’hui en profonde mutation. Cette révolution, appelée “NewSpace” est portée par des start-ups, entreprises, laboratoires et organisations diverses dans le monde entier.

La mission de l’Alliance NewSpace France est de fédérer l’ensemble des acteurs de la filière NewSpace sur le territoire Français pour faire rayonner au niveau national et mondial son savoir-faire.

« En France, nous portons des innovations majeures sur l’intégralité du secteur spatial, avec toute la chaîne de valeur du satellite, allant du lancement au traitement des données, en passant par son lancement, et même du tourisme spatial », explique Stanislas Maximin, Président de la nouvelle Alliance.

Des objectifs ambitieux pour permettre à la France de rester sur le devant de la scène

L’Alliance NewSpace représente une vingtaine de membres, plus de 700 employés et plusieurs dizaines de millions d’euros d’investissement en 2020. Elle renforce le positionnement des acteurs de la filière en améliorant leur visibilité, en renforçant l’investissement, en favorisant les co-développements, en saisissant les opportunités d’affaires à l’international. Sa mission : défendre les valeurs, les besoins et les attentes de la filière en France et en Europe.

La France dispose d’un terreau institutionnel et industriel fertile, la positionnant au cœur de l’écosystème aérospatial mondial. Cependant, son avenir dépend des nouvelles initiatives qui émergent et se développent très rapidement.

« Le NewSpace est synonyme d’agilité pour répondre au plus vite à un marché dynamique en pleine mutation. Une coopération ouverte au niveau français est sans conteste un facteur de succès pour faire face à une compétition mondiale qui se renforce. Cette initiative propose une approche constructive face à cet enjeu. » note Giao-Minh Nguyen, Vice-Président de l’Alliance.

Porter une vision transverse du secteur centrée sur la coopération

Si la participation et le support déjà existant des institutions et du gouvernement sont nécessaires au bon développement de la filière, Stanislas Maximin précise :

« Nous sommes convaincus que l’innovation doit être au service des marchés, des besoins et de la vision des entreprises. Elle doit émaner des acteurs qui prennent les risques et qui innovent. Ainsi, l’Alliance se veut être une plateforme fertile pour encourager les interactions, les projets et les idées entre les entreprises du NewSpace. »

Objectif : mettre en commun les besoins et les attentes, faciliter le développement de projets dans la filière, se diversifier et attaquer de nouveaux marchés internationaux.

Stanislas Maximin (Venture Orbital), Président

Pour en savoir plus : Compte Twitter de l’Alliance NewSpace France

Space Cyber Security Watch N°1 – 3 May 2021

By
François Quiquet
-
0

PDF VERSION AVALAIBLE HERE

Find below the first Space Cyber Security Watch of the Space Cyber Security Community. In this paper, you will find everything that has caught our attention since the last time : news, articles, papers, Space CTI, videos, webinars, events, attacks, podcats …

For this first Space and Cyber Security Watch, we catch up on the news since the beginning of the year.

I would like to thank Coreteam members of the Space Cyber Security Community for their help in this work (Stephane, Teodor, Yohann, Florent, Julien)

This work is not exhaustive. So comments and observations are welcome.

Contents

News of the latest Attacks on Space Systems

List of new Articles

January 2021

February 2021

March 2021

April 2021

CYSAT’21

Space ISAC (Space Information Sharing and Analysis Center)

SPD-5 : National Space Policy Directive 5 aka « Cybersecurity Principles for Space Systems »

(EN) On September 4, 2020, U.S. President Donald Trump issued Space Policy Directive 5 (SPD-5), known as the “Cybersecurity Principles for Space Systems”, on the cybersecurity of space systems and their supporting infrastructure

(FR) Le 4 septembre 2020, le Président des États-Unis Donald Trump a promulgué la Space Policy Directive 5 (SPD-5) dite « Cybersecurity Principles for Space Systems » relative à la cybersécurité des systèmes spatiaux et de leurs infrastructures de support

AsterX: First french military exercise in space

(EN) France is conducting its first military space exercise to assess its satellite protection and surveillance capabilities in a now militarised space.

(FR) La France mène son premier exercice militaire spatial afin d’évaluer ses capacités de protection de ses satellites et de surveillance dans un espace désormais militarisé.

War in Space

Some good Papers

Videos

Webinars to review

Podcasts

Upcoming Events

  • (EN) Securing Software-Defined Satellites (Wednesday May 5, 2021)
  • (EN) Inaugural Space Cybersecurity Symposium – on May 5, 2021 (Virtual Event) a conference organized by NIST. This event is jointly hosted by the Department of Commerce (DOC) and Department of Homeland Security (DHS)
  • (EN) SpaceOps 2021 – The 16th international conference on space operations (3-5 May 2021)  will be virtual and free and has a cyber session, with a co-chair from CNES (Centre national d’études spatiales – French national space center)
  • (EN) IAF’s IAC 21 in Dubaï – 72nd International Astronautical Congress 2021 (25-29 October 2021, Dubai, United Arab Emirates) will have two (yes 2!) security sessions :
    • D5 is 54th IAA Symposium on Safety, Quality and Knowledge Management in Space Activities (D5.4 will be more technical : Cybersecurity in space systems, risks and countermeasures)
    • E9 is IAF Symposium on Space Security (E9.2 is more strategic and legal focused : Cyber-based security threats to space missions – establishing the legal, institutional and collaborative framework to counteract them)
    • Papers have been selected and the program will be published shortly

CYSAT ’21, a space cybersecurity conference : Full Keynotes and Presentations

By
François Quiquet
-
0

CYSAT ’21 is the first conference in Europe dedicated to satellite and space industry cyber security. It took place from 17 to 19 March 2021 and brought together key players from the European space industry to share challenges and solutions related to cyber risks and cyber security in space.

You will find below the full recording of the 3 days of conferences with all the speakers. The conference programme is available here. The list of speakers is available here.

CYSAT ’21 – Teaser

CYSAT’21 Opening keynote by Elodie Viau (ESA)

CYSAT’21: Massimo Mercati from the European Space Agency (ESA)

CYSAT’21: Patrick Nicolet “How current cybersecurity trends can serve the space industry”

CYSAT’21: Florian Shütz “Switzerland, a leading nation for cybersecurity and space innovation”

CYSAT ’21: Alexandre Karlov “End-to end protection of space assets and data”

CYSAT ’21: Giovanni Pandolfi “Exploiting cybersecurity from the ground (segment) up”

CYSAT ’21: Enrique Fraga Moreira “Keeping the cloud securely attached to the ground (segment)”

CYSAT ’21: Adrien Bécue “The role of quantum technologies in secure communications”

CYSAT ’21: Akash Patel “Democratizing and reliability of data & AI solutions in space”

CYSAT ’21: S. Linden & C. Rückriegel “Security considerations for ground segment cloud platforms”

CYSAT ’21: James Pavur “Adventures in VSAT hacking: lessons for space security”

CYSAT ’21: Vincent Lenders “Secure and fast satellite broadband”

CYSAT ’21: Julien Airaud, “Overview of cybersecurity integration”

About CYSEC

CYSEC is a cybersecurity company based at the EPFL Innovation Park in Lausanne, Switzerland, whose mission is to shorten the time-to-market of innovative services by facilitating their integration into a secured IT environment. By lowering down the barriers to protect data and code, CYSEC enables its customers to benefit from a whole new level of flexibility and agility which is a game-changer today considering the fast-pace at which security and business requirements evolve. For more information, please visit www.cysec.com/space

About AP-Swiss

AP-Swiss is the Ambassador Platform of the European Space Agency’s ARTES Applications programmes in Switzerland.  It is a partnership between the European Space Agency (ESA)   and the State Secretariat for Education, Research and Innovation (SERI) of the Swiss Confederation. AP-Swiss also supports ESA BIC Switzerland, the ESA Business Incubation center in Switzerland. For more information, please visit www.ap-swiss.ch

CYSAT’21, le 1er événement européen consacré à la cybersécurité de l’industrie spatiale

By
François Quiquet
-
0

CYSEC, une entreprise suisse spécialisée dans la cybersécurité, co-organise avec AP-Swiss, la plateforme “Ambassadeurs” du programme d’applications de l’Agence Spatiale Européenne (ESA) en Suisse, l’événement CYSAT’21, la première conférence en Europe, consacrée à la cybersécurité des satellites et de l’industrie spatiale.

Un événement entièrement virtuel et en ligne

CYSAT ’21 devait réunir à Davos, en Suisse, du 17 au 19 mars 2021, les principaux acteurs de l’industrie spatiale européenne pour partager les défis et les solutions liés aux cyber-risques et à la cyber-sécurité dans l’espace.

Suite à la crise sanitaire et la poursuivre de la pandémie, l’événement passe entièrement en virtuel et en ligne. Les participants pourront suivre très confortablement les présentations et les discussions en panel via un flux diffusé en direct. La mise en réseau se fera grâce à la plateforme b2match.

Teaser CYSAT’21

Pourquoi un tel événement ?

Pendant des années, les ingénieurs de l’aérospatiale se sont consacrés essentiellement à la construction de satellites fiables, souvent au détriment de la sécurité.

Avec un accès de plus en plus facile à l’espace et l’essor des nouveaux services via l’espace qui collectent par exemple des données, les actifs spatiaux deviennent des cibles attrayantes pour les pirates.

Le moment est venu de construire un écosystème européen capable de répondre aux défis actuels et futurs de la sécurisation de ces actifs stratégiques, des données et des services depuis l’espace afin de garantir leur sécurité et que chaque pays puisse préserver sa souveraineté.

La CYSEC, en partenariat avec AP-Swiss, a souhaité apporter à la communauté spatiale européenne la possibilité d’apprendre, de partager et de se connecter sur le thème de la cybersécurité en réunissant des spécialistes du domaine, des pirates éthiques et des experts, le tout au sein d’un événement d’une durée de trois jours.

Informations pratiques

  • Le programme de la conférence est disponible ici.
  • La liste des intervenants est disponible ici.
  • L’enregistrement en ligne se fait ici.
  • Plus d’information sur le site de l’événement cysat.eu

A propos de CYSEC

CYSEC est une société de cybersécurité basée au Parc de l’innovation de l’EPFL à Lausanne, en Suisse qui combine une connaissance approfondie de la sécurité et une vaste expérience de l’industrie.

Les équipes de CYSEC sont composées de cryptographes, de spécialistes de la sécurité logicielle et d’ingénieurs en matériel. CYSEC est une société qui peut fournir des solutions de sécurité agiles pour les infrastructures informatiques les plus complexes dans le monde entier et qui est prête à relever le nouveau défi de la cybersécurité.

CYSEC permet à ses clients de bénéficier d’un tout nouveau niveau de flexibilité et d’agilité qui change la donne aujourd’hui, compte tenu de l’évolution rapide des besoins en matière de cybersécurité. Pour plus d’informations, veuillez consulter le site www.cysec.com/space

A propos d’AP-Swiss

AP-Swiss est la plate-forme “Ambassadeursé du programmes d’applications ARTES de l’Agence spatiale européenne en Suisse. Il s’agit d’un partenariat entre l’Agence spatiale européenne (ESA) et le Secrétariat d’État à l’éducation, à la recherche et à l’innovation (SERI) de la Confédération suisse. AP-Swiss soutient également ESA BIC Switzerland, le centre d’incubation d’entreprises de l’ESA en Suisse. Pour plus d’informations, veuillez consulter le site www.ap-swiss.ch

1...8910...12Page 9 of 12

Last Posts

My experience and tips after successfully passed the CISM (Certified Information Security Manager) from...

François Quiquet - 0
🌟 I'm thrilled to share that I've earned the CISM (Certified Information Security Manager) from ISACA. You can view my achievement on Credly. 🌍 This...

How to model an attack on an Industrial Control Systems (ICS)

François Quiquet - 0
Attacks on OT (Operational Technology) systems are made easier due to the OT/IT convergence. The figure below is showing an example of OT/IT convergence. Attacks on OT...

Space and Satellites Security Conferences at DEF CON 32 (and a little bit Aviation...

François Quiquet - 0
The videos from the Def Con 32 conference held in Las Vegas from August 8th to 11th are now online. Perfect for keeping busy...

My cybersecurity review from the beginning of 2024

François Quiquet - 0
What an incredible start to 2024. I've had some incredible opportunities and I've been able to do some really interesting things. I continue my role as...

Very proud to receive the certificate of completion : « Introduction to Cybersecurity in...

François Quiquet - 0
I’m very proud to receive the following certificate of completion for having successfully completed the training course : « Introduction to Cybersecurity in Space...

Popular Category

Popular posts

Description of the Elements of a Satellite Command and Control System

François Quiquet - 1
In order to be able to analyse the various threats and identify the risks facing a space system, it is necessary to describe precisely...

Install KYPO Cyber Range Platform on Openstack and Ubuntu in AWS cloud

François Quiquet - 4
KYPO is a Cyber Range Platform (KYPO CRP) developed by Masaryk University since 2013. KYPO CRP is entirely based on state-of-the-art approaches such as...

Cartographie des acteurs étatiques du cyber en France

François Quiquet - 0
Avec l'aimable autorisation de Martial Le Guédard, nous reproduisons ci-dessous sa cartographie au sujet des différents acteurs étatiques évoluant dans le domaine du Cyber...

What are the threats to space systems?

François Quiquet - 0
In this article, we will try to identify the various threats to space systems. This article is a synthesis of the CSIS (Center for Strategic...

Qu’est-ce que le grand Commandement De l’Espace (CDE) créé par la France pour la...

François Quiquet - 0
Le Commandement De l’Espace (CDE) a été créé par arrêté le 3 septembre 2019. Il succède au Commandement interarmées de l’espace (CIE). Il rassemble...

EDITOR PICKS

POPULAR POSTS

POPULAR CATEGORY

© Copyright Space Security Info. Tous droits réservés.