The White House on Sept. 4 released Space Policy Directive-5 (SPD-5) regarding cybersecurity for space systems, as a senior administration official told reporters that cyber threats on U.S. space systems happen with \u201cconcerning regularity.\u201d<\/p>\n
\u201cWith regard to particular cyber threats, I can\u2019t really talk about those at an unclassified level, but suffice it to say that they do occur, and they occur with concerning regularity such that this set of cybersecurity principles was important,\u201d the official said.<\/p>\n
Such attacks may result in debris-generating space collisions and may include spoofing sensor data; corrupting sensor systems; jamming or sending unauthorized commands for guidance and control; injecting malicious code; and denial-of-service attacks.<\/p>\n
\u201cOne of the reasons why we did a special cybersecurity discussion of space systems is because they\u2019re hard to get to,\u201d the administration official said regarding SPD-5. \u201cSatellite servicing is being developed so at some future point going out there to an existing satellite and providing a hardware upgrade will be possible where that\u2019s hard to do right now. On the other hand, that doesn\u2019t mean that we can\u2019t do anything about current systems that are out there.\u201d<\/p>\n
Such available measures include securing ground-based tracking and communications and protecting satellite uplinks through the encryption of forward telemetry, the official said.<\/p>\n
In terms of future cybersecurity hardware upgrades for on orbit satellites, the official said that \u201cthere are a number of technologies being developed for satellite servicing, rendezvous and proximity operations\u201d and that \u201cNASA<\/strong> has been a pioneer of some satellite servicing opportunities.\u201d<\/p>\n In one such example, the Northrop Grumman <\/strong>Mission Extension Vehicle-1 (MEV-1) docked with the geostationary Intelsat<\/strong> IS-901 satellite on Feb. 25 to extend the latter satellite\u2019s service life. MEV-2 launched on Aug. 15 and is to dock with the Intelsat IS-1002 early next year. The second Mission Extension Vehicle (MEV-2) launched Aug. 15, along with the Northrop Grumman-built Galaxy 30 satellite. MEV-2 will dock with the Intelsat IS-1002 satellite in early 2021.<\/p>\n Companies are also looking at \u201cactive [space] debris removal,\u201d the official said. \u201cOn orbit robotic operations are just continuing to increase.\u201d<\/p>\n In addition, while \u201cdeep hardware changes\u201d for cybersecurity are not yet possible in space, NASA does have experience through the Mars Rover and International Space Station (ISS) programs in upgrading and fixing software from long distances, the official said.<\/p>\n SPD-5 appears to rely on industry to develop best cybersecurity practices for space systems, rather than establishing federal government standards and monitoring of that cybersecurity.<\/p>\n The U.S. Department of Homeland Security<\/strong>\u2019s Critical Infrastructure Partnership Advisory Council (CIPAC) is to coordinate efforts among industry partners in 16 critical infrastructure sectors and federal agencies, including DHS\u2019 Cybersecurity and Infrastructure Security Agency (CISA), U.S. Department of Defense<\/strong> (DoD), the U.S. Department of Commerce<\/strong>, and NASA to develop best practices for space system cybersecurity, another senior administration official said.<\/p>\n SPD-5 is to introduce space system cybersecurity as a focal point in some of the 16 critical infrastructure sectors that already have space industry participants, such as communications, the defense industrial base, critical manufacturing, and transportation sectors, the official said.<\/p>\n \u201cSpace system owners and operators should collaborate to promote the development of best practices, to the extent permitted by applicable law. They should also share threat, warning, and incident information within the space industry, using venues such as Information Sharing and Analysis Centers [ISACs] to the greatest extent possible, consistent with applicable law,\u201d per SPD-5.<\/p>\n The policy directive states that \u201cspace systems and their supporting infrastructure, including software, should be developed and operated using risk-based, cybersecurity-informed engineering.\u201d<\/p>\n \u201cSpace systems should be developed to continuously monitor, anticipate, and adapt to mitigate evolving malicious cyber activities that could manipulate, deny, degrade, disrupt, destroy, surveil, or eavesdrop on space system operations,\u201d per SPD-5.<\/p>\n Space, typically taken for granted, has assumed a place closer to national center stage in recent years. Last year, the U.S. Space Force<\/strong> was established as the sixth military service, and in June, 2017, after a 20-year hiatus, the White House re-established the National Space Council, established in 1989 by former Pres. George H.W. Bush and disbanded in 1993. Chaired by the vice president and composed of cabinet members who receive counsel from a users advisory group, the council has met seven times since its re-establishment to formulate space policy.<\/p>\n This article was originally published by our sister publication Defense Daily.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":" The White House on Sept. 4 released Space Policy Directive-5 (SPD-5) regarding cybersecurity for space systems, as a senior administration official told reporters that cyber threats on U.S. space systems happen with \u201cconcerning regularity.\u201d \u201cWith regard to particular cyber threats, I can\u2019t really talk about those at an unclassified level, but suffice it to say that they […]<\/p>\n","protected":false},"author":1,"featured_media":47333,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[2],"tags":[],"class_list":["post-59072","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/59072"}],"collection":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/comments?post=59072"}],"version-history":[{"count":0,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/posts\/59072\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media\/47333"}],"wp:attachment":[{"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/media?parent=59072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/categories?post=59072"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/starpath.global\/blog\/wp-json\/wp\/v2\/tags?post=59072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}