Posted inSecurity

Kaspersky urges government and tech leaders to ensure cybsersecurity in space

Kaspersky’s latest report, which the cybersecurity firm conducted in partnership with Zayed University, comes as more and more countries are entering space

Elon Musk hints at possible Starlink IPO
Elon Musk hints at possible Starlink IPO

Governments and organisations should put ample focus on the cybersecurity aspects of space travel and the threat that compromised infrastructure could pose to human exploration of space, according to the latest study by Kaspersky.

The report, which the cybersecurity firm conducted in partnership with Zayed University, comes as more and more countries are entering space, most recently the UAE with its Hope mission.

Titled, ‘Cyber threat profile of space infrastructure’, the study delved into why just like any critical infrastructure environment, space infrastructure often incorporates a traditional user segment, with a corporate network that hosts e-mail services, e-services, and file servers.

There will also be the field, or space, segment, where space probes, sensors, actuators, satellites or similar systems are collecting data from the physical environment. A supervisory or ground layer will interconnect the field devices with the corporate network for monitoring and processing the data collected.

“Space travel is going to be the norm quite soon, with more countries launching their missions to space. The latest advancements in technology are what make space exploration feasible soon. Space travel is no longer of interest to only governments but it is now becoming increasingly popular among private companies aiming to bring space to everyone,” said Monther Aldwairi, Chair of Computing and Applied Technology Department at Zayed University.

The study pointed out that space infrastructure encompasses mission-critical systems such as rockets, orbital stations, satellites, unmanned air systems, space probes, robotics, and space-to-earth communications systems. Satellites, for example, are used in several use cases such as monitoring weather, the atmosphere, and intelligence gathering, but also to explore our solar system and outer space. Satellites are then used with communication systems to deliver vital messages to earth stations for analysis.

Space infrastructure has multiple entry points: corporate networks or the user segment, satellite communication stations, orbiting satellites, and any system that connects to the space network to use its services. In the near future, as early as late 2022, the entry points could increase further to include LTE/4G towers on the moon’s surface.

The threat to space infrastructure is not fiction but is already happening. In recent years, we’ve seen multiple threat actors abusing space infrastructure. Their goal is to either disrupt satellite communications, exploit the infrastructure to intercept satellite transmissions, or steal sensitive information. Communication satellites are already being targeted and countries are believed to be forming units dedicated to protecting space infrastructure, such as the US Space Force.

“Traditional critical infrastructure has been compromised repeatedly in recent years, with often serious consequences. Humans must learn from past mistakes and make cybersecurity a priority from the outset as they expand into space,” said Maher Yamout, Senior Security Researcher at Kaspersky.

Kaspersky also highlighted a number of factors that will greatly increase the need for critical space infrastructure, especially communications and network systems, including:

  • Space tourism will become common and hotels will start to be built in space.
  • Rocket-propelled planes will enable humans to travel at speeds of up to 27,000 km/h.
  • Robots will begin to play the role of astronauts, especially in deep space.
  • Human colonies will be established on different planets.
  • The mining industry will begin to operate in space.

According to the report, with this factors in mind, the potential attack surface is large, the scope for disruption is considerable and the potential gains for malevolent actors could be very attractive.

It is clear that space travel is spurring rapid advancement in technology and the vital infrastructure that is being created must be protected from the very beginning. As humankind ventures ever further into space, an approach that focuses on the complete protection of space infrastructure will be the only sensible option.