WASHINGTON — As more and more satellite communication systems launch into low-Earth orbit, the “attack surface” for malicious cyber actors is growing as well, warns a new report circulated in part by the National Security Agency.
“This growth puts critical networks that depend on these satellite services at greater risk. Securing this infrastructure is essential to ensuring the resilience of commercial communications, national security systems and emergency response capabilities,” the report states. “A successful cyber attack could lead to service disruptions, exposure of sensitive data, and even physical harm to individuals and assets. This reinforces the urgent need for robust cyber security measures.”
The report, authored by the Australian Signals Directorate’s Australian Cyber Security Centre in collaboration with the Australian Space Agency, the Canadian Centre for Cyber Security, the NSA, and the New Zealand National Cyber Security Centre, note key services these new constellations provide to include low-latency and high-bandwidth internet, mobile backhaul and direct-to-device communication.
Several militaries around the globe, to include the US, have begun to place a great deal of emphasis on these constellations given the military utility of those services. As a result, they have become subject to disruption by adversaries looking to deny capabilities to their foes.
The report did not detail any incidents in particular, but it warned that “LEO SATCOM systems face unique challenges due to their distributed architecture and limited physical access to space-based assets. They also rely on radio frequency links that are susceptible to jamming, spoofing and interception.”
“Organisations should define security expectations and requirements with their SATCOM service providers,” it says. “These discussions ensure risk profiles are understood, and appropriate protections are in place. Users and organisations should consider regular testing and updating of incident response and continuity plans, to include scenarios for satellite service loss or compromise.”
The intelligence agencies outline several risk vectors with corresponding mitigation measures to ensure users and managers understand threats. Those risk areas, among others, include the satellites themselves, the ground stations and terminals, end user devices that connect to LEO services, communication links and the supply chain.
Threats to space and space systems don’t extend just to these constellations, but launches themselves. Space Force’s Space Systems Command just announced two new cyber squadrons to defend against potential cyberattacks during launches.
