By Capt. Courtney Fleming
MS Student, Department of Electrical and Computer Engineering
Air Force Institute of Technology

The Department of Defense (DoD) heavily relies on satellites for operations ranging from navigation and communication to intelligence. It has become increasingly evident that adversaries possess both the capability and intention to target space systems via cyberattacks. A concerning observation is that, unlike their terrestrial counterparts, many space systems are not adequately fortified with cybersecurity defenses. Historically, there has been an underlying assumption that the vastness of space and isolated networks naturally provided security, which is proving to be a flawed perspective.

One potential solution to the cybersecurity challenges is to implement a space-based intrusion detection system. These systems play a pivotal role in the realm of cybersecurity, as they can either identify known attack signatures or detect anomalous network/host behavior indicative of potential breaches. However, the unique environment of space presents its own set of challenges.

Modern terrestrial intrusion detection often integrates machine learning, a mechanism that learns from recorded threats to anticipate and mitigate future ones. For space systems, a significant challenge arises due to the limited dataset of known cyberattacks, which restricts the effectiveness of such machine-learning applications.

However, ongoing AFIT research has sought to address this. Researchers are utilizing the NASA Operational Simulator for Small Satellites (NOS3) to develop a methodology for gathering data on satellite behavior during cyberattacks.

The attacks, simulated through ground-based shell scripts inspired by the SPARTA framework (https://sparta.aerospace.org/), either induce a denial-of-service attack or directly targeted satellite hardware. Metrics including CPU utilization, memory consumption, and abrupt system changes are closely observed and analyzed during experimentation.

Integrating new advanced intrusion detection system may significantly enhance space systems’ security, ensuring the DoD’s satellite operations remain robust against evolving cyber threats. Continued research and collaboration between partner institutions is vital to addressing the unique challenges presented by space-based operations.