Research Reveals Critical Cybersecurity Flaws in Space Satellites

Concerns about cybersecurity vulnerabilities have surfaced as space corporations and telecommunications providers seek to deploy hundreds of new satellites into orbit.

The possible overlook of fundamental cybersecurity measures by satellite makers in their rush to expand their fleets has been brought to light by recent academic research headed by Ph.D. student Johannes Willbold at Ruhr University Bochum, according to Gizmodo.

The study concentrated on three research satellites: the smaller Flying Laptop satellite developed by Stuttgart University and Airbus, the European Space Agency's OPS-SAT open research platform, and the Estonian cube satellite ESTCube-1. The researchers identified 13 distinct vulnerabilities among these satellites, totaling six unique flaws, which prompted concerns about the likelihood of cyber assaults.

Security Lagging Behind for Years

One of the main weaknesses discovered was the inability to employ basic encryption, which resulted in exposed telecommand interfaces. A flaw was also found in a code library that GomSpace maintains, which several satellites use. Before publishing, the researchers informed the interested firms of these vulnerabilities.

According to the study, space security systems lag behind cybersecurity research by around 10 years, highlighting the gap between the two fields of study. Costs associated with these outdated security methods might be high. Theoretically, malicious actors may take advantage of these flaws to take complete control of a satellite, collide it with other satellites, and set off a devastating chain reaction of space debris.

In addition, a study of 19 expert satellite engineers and developers, who operate on over 132 spacecraft, demonstrated a preference for function above security. Surprisingly, participants in three of the 17 satellites examined in the poll acknowledged that no safeguards were in place to prevent outsiders from seizing control.

High Risks Raised

Cybersecurity experts stress that there is a severe danger that cyberattacks on satellites might interrupt vital services used by industry, academics, and the general public, per Via Satellite. They pointed out the satellite systems' interconnectedness presents an extreme risk because corporate IT systems might send automated harmful malware from ground stations to space components.

Several methods to hack satellite systems include jamming and spoofing attacks that interfere with signal transmissions. Software and firmware vulnerabilities were also identified as possible vectors of attack, according to Wired. Concerns in the space sector have increased due to recent assaults on the Viasat satellite system during Russia's invasion of Ukraine, which prompted the US National Security Agency to address satellite security.

The supply chain for satellite components adds new security vulnerabilities as the commercial space industry continues to develop and firms like SpaceX quickly deploy satellites for internet access and Earth observation. Experts emphasized the significance of the space sector to focus on and improve its cybersecurity procedures to protect satellites and reduce the risk presented by possible threats posed by cyber attackers.