Satellite Systems Security Needs To Be Reinforced Against Cyber Attack

Three months following the disruption of the Viasat satellite communications system at the outset of the attempted invasion of Ukraine, there are continued concerns about the adequate protection of the ground systems and networks that provide many entry points for cyber attackers. 

Russia’s continued attack on Ukraine has been under constant surveillance by satellites, highlighting their importance in the conflict and how vulnerable satellite systems are to cyber attack.

US Space Force Lt. Gen.Chance Saltzman, deputy chief of space operations for nuclear and cyber, said he had been briefed about Russian cyber attacks which were aimed at Ukrainian users of satellite Internet services. “One of the observations that I would offer on that is that, if you think the only way to dismantle space capabilities is by shooting down satellites, you’re missing the bigger picture … as these cyber attacks are on ground networks,” Saltzman told Spacenews.

The US State Department has blamed Russia for a cyber attack on Viasat’s KA-SAT satellite Internet network that took place a day before Russian forces attacked Ukraine. The attack disabled user terminals in Ukraine and across Europe that provide Internet services to private citizens. Viasat said the satellite itself was not targeted and the attack affected 40,000 user terminals, a small fraction of the hundreds of thousands of customers of the network. Viasat said services have since been restored.

In a separate development, Space-X owner Elon Musk has tweeted that Russian hackers have been trying to take down SpaceX’s Starlink broadband service the company is providing in Ukraine.

If the ground infrastructure that supports satellites becomes the main target, it will be important to have “assured networks that are defended by cyber professionals, or we’re not going to be effective in accomplishing our missions,” Saltzman said. “I think that’s a critical point that we’ve learned from this environment.” 

Lt. Gen. Stephen Whiting, commander of the US Space Force’s Space Operations Command, told SpaceNews that the likeliest form of attack facing satellite networks is on the ground. “Cyberspace is the soft underbelly of our global space networks.” he said. 

In response, the Space Operations Command is retraining cyber security specialists who protect desktop systems at Space Force bases to more demanding roles defending military satellite networks. Saltzman said more time will be needed to evaluate the events in Ukraine as the conflict continues. 

Russia can use its satellites to attack other satellites physically and virtually in orbit, as made evident in 2021 when it fired a missile from one of its satellites to successfully destroy another of its satellites.

Spacenews:    Spacenews:    Reuters:      Fierce Electronics:     NYPost:    The CyberwireC4ISRNET:     

You Might Also Read: 

Cyberspace & Outer Space Are New Frontiers For National Security:

 

« Cyber Attacks On Ukraine Step Up The Pressure
How To Build A Successful Zero Trust Strategy For Data Analytics Users »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

PlaxidityX

PlaxidityX

PlaxidityX (formerly Argus Cyber Security) is a global leader in mobility cyber security, provides DevSecOps, vehicle protection and fleet protection technologies and services.

Conceptivity +360 Cybersecurity

Conceptivity +360 Cybersecurity

Conceptivity +360 Security addresses advanced cybersecurity and supply chain security issues in policy, regulatory, legislation, standardisation, compliance and project management areas.

Information Network Security Agency (INSA) - Ethiopia

Information Network Security Agency (INSA) - Ethiopia

INSA's vision is to realize a globally competent National Cyber capability which plays a key role in protecting the national interests of Ethiopia.

Tempered Networks

Tempered Networks

Tempered Networks delivers the first purpose-built platform for IIoT cybersecurity that allows customers to connect and secure devices in minutes without the need for specialized skills.

Wüpper Management Consulting (WMC)

Wüpper Management Consulting (WMC)

Specialized in compliance, risk management and holistic information security WMC GmbH has longtime implementation experience in global projects.

Liquid Technology

Liquid Technology

Liquid Technology provide DOD- and NIST-compliant data destruction and EPA-compliant e-waste disposal and recycling services throughout North America, Europe and Asia.

US Venture Partners (USVP)

US Venture Partners (USVP)

USVP is a leading Silicon Valley venture capital firm focusing on early-stage start-ups that transform cybersecurity, enterprise software, consumer mobile and e-commerce, and healthcare.

FifthDomain

FifthDomain

We are a specialist cyber security education and training company tackling the global cyber security skills shortage.

Industrial Control System Information Sharing and Analysis Center (ICS-ISAC)

Industrial Control System Information Sharing and Analysis Center (ICS-ISAC)

ICS-ISAC is a non-profit, public/private Knowledge Sharing Center established to help facilities develop situational awareness in support of local, national and international security.

ConnectSecure

ConnectSecure

ConnectSecure (formerly CyberCNS) is a global cybersecurity company that delivers tools to identify and address vulnerabilities and manage compliance requirements.

Global Cybersecurity Institute - Rochester Institute of Technology (RIT)

Global Cybersecurity Institute - Rochester Institute of Technology (RIT)

At RIT’s Global Cybersecurity Institute, we educate and train cybersecurity professionals; develop new cybersecurity and AI-based knowledge for industry, academia, and government.

BaaSid

BaaSid

BaaSid is next generation security technology for data security & security authentication based on De-centralized & Blockchain.

Protelion

Protelion

The Protelion Security Platform is uniquely architected to deliver security solutions that combine greater protection, flexibility, and performance.

Hush

Hush

Hush is a premium privacy service that gives people unprecedented visibility and control of their digital footprint. Hush assesses threats, and goes to work to eliminate digital risks on your behalf.

Intracis

Intracis

Intracis is a 'Made in India' cyber incident management solution aimed at ‘Making Security Simple’ by simplifying cyber incident management for CERTS and CSIRTS.

Maveris

Maveris

Maveris is an IT and cybersecurity company committed to helping organizations create secure digital solutions to accelerate their mission.