[논문]Efforts against Cybersecurity Attack of Space Systems

Jin-Keun Hong

doi:10.11003/jpnt.2023.12.4.437

Efforts against Cybersecurity Attack of Space Systems 원문보기

Journal of Positioning, Navigation, and Timing, v.12 no.4, 2023년, pp.437 - 445

Abstract ▼ AI-Helper

A space system refers to a network of sensors, ground systems, and space-craft operating in space. The security of space systems relies on information systems and networks that support the design, launch, and operation of space missions. Characteristics of space operations, including command and control (C2) between space-craft (including satellites) and ground communication, also depend on wireless frequency and communication channels. Attackers can potentially engage in malicious activities such as destruction, disruption, and degradation of systems, networks, communication channels, and space operations. These malicious cyber activities include sensor spoofing, system damage, denial of service attacks, jamming of unauthorized commands, and injection of malicious code. Such activities ultimately lead to a decrease in the lifespan and functionality of space systems, and may result in damage to space-craft and, lead to loss of control. The Cybersecurity Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK) matrix, proposed by Massachusetts Institute of Technology Research and Engineering (MITRE), consists of the following stages: Reconnaissance, Resource Development, Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command & Control, Exfiltration, and Impact. This paper identifies cybersecurity activities in space systems and satellite navigation systems through the National Institute of Standards and Technology (NIST)'s standard documents, former U.S. President Trump's executive orders, and presents risk management activities. This paper also explores cybersecurity's tactics attack techniques within the context of space systems (space-craft) by referencing the Sparta ATT&CK Matrix. In this paper, security threats in space systems analyzed, focusing on the cybersecurity attack tactics, techniques, and countermeasures of space-craft presented by Space Attack Research and Tactic Analysis (SPARTA). Through this study, cybersecurity attack tactics, techniques, and countermeasures existing in space-craft are identified, and an understanding of the direction of application in the design and implementation of safe small satellites is provided.

주제어

표/그림 (1)

표 Table 1. Number of countermeasures in cyber attack of space system's SPARTA model.

AI 본문요약
AI-Helper

제안 방법

The primary focus of this paper was to examine security threats within the cosmic system, followed by a detailed exploration centered on the cyber security tactical attack matrix. The cybersecurity tactics attack matrix is focused from SPARTA model as follows: initial access, execution, persistence, defense evasion, lateral movement, exfiltration, impact.
The primary focus of this paper was to examine security threats within the cosmic system, followed by a detailed exploration centered on the cyber security tactical attack matrix. The cybersecurity tactics attack matrix is focused from SPARTA model as follows: initial access, execution, persistence, defense evasion, lateral movement, exfiltration, impact.
This paper contributes to understanding the direction of attack tactics, techniques, and countermeasures focusing on the US government's cybersecurity principles, cybersecurity policies, and Space Attack Research and Tactic Analysis (SPARTA) for the space system described above.

참고문헌 (23)

America's Cyber Defense Agency 2022, Strengthening？Cybersecurity of SATCOM Network Providers and？Customers, [Internet], cited 2023 Nov 10, available from:？https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-076a
Bailey, B. 2021, Cybersecurity Protections for Spacecraft:？A Threat Based Approach, Aerospace report, TOR-2021-01333-REV A. https://aerospace.org/sites/default/files/2022-07/DistroA-TOR-2021-01333-Cybersecurity%20Protections%20for%20Spacecraft--A%20Threat%20Based%20Approach.pdf
Bartock, M., Brule, J., Li-Baboud, Y. S., Reczek, K., Northrip,？D., et al.2022, Foundational PNT Profile: Applying the？Cybersecurity Framework for the Responsible Use of？Positioning, Navigation, and Timing (PNT) Services,？NIST IR 8323r1 ipd. https://doi.org/10.6028/NIST.IR.8323r1.ipd
European Space Policy Institute (ESPI) 2022, The War in？Ukraine from a Space Cybersecurity Perspective, Short？report. https://www.espi.or.at/reports/new-espi-short-report%e2%80%95the-war-in-ukraine-from-a-space-cybersecurity-perspective/
Federal Office for Information Security, Cyber Security？for Air and Space Applications, [Internet], cited 2023？Nov 10, available from: https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/IT-Sicherheit-in-Luft-und-Raumfahrt/it-sicherheit-in-luft-und-raumfahrt.html
Ingols, K. W. & Skowyra, R. W. 2019, Guidelines for Secure？Small Satellite Design and Implementation: FY18 Cyber？Security Line-Supported Program, Project Report LSP-249 MIT. https://www.ll.mit.edu/sites/default/files/publication/doc/guidelines-secure-small-satellite-design-ingols-lsp-249.pdf
Leonardo DRS, [Internet], cited 2023 Nov 18, available from:？https://www.leonardodrs.com/what-we-do/products-and-services/a-pnt/
Lightman, S., Suloway, T., & Brule, J. 2022, Satellite Ground？Segment, NIST IR 8401. https://doi.org/10.6028/NIST.IR.8401
Manulis, M., Bridges, C. P., Harrison, R., Sekar, V., & Davis,？A. 2021, Cyber security in New Space, International？Journal of Information Security, 20, 287-311. https://doi.org/10.1007/s10207-020-00503-w

상세보기
Martin, M., Sunmola, F., & Lauder, D. 2023, A TEMPEST？vulnerability prediction method for cyber security？practitioners, Alexandria Engineering Journal, 78, 561-575. https://doi.org/10.1016/j.aej.2023.07.059

상세보기
McCarthy, J., Mamula, D., Brule, J., Meldorf, K., Jennings,？R., et al. 2023, Cybersecurity Framework Profile for？Hybrid Satellite Networks, NIST IR 8441. https://doi.org/10.6028/NIST.IR.8441
MOD 2020, Responses in the Domains of Space, Cyberspace？and Electromagnetic Spectrum, Part 3, Three Pillars of？Japan's Defense (Means to Achieve the Objectives of？Defense), Defense of Japan, pp.266-274. https://www.mod.go.jp/en/publ/w_paper/wp2020/pdf/R02030103.pdf
NIS2 Directive 2022, [Internet], cited 2023 Nov 10, available？from: https://www.nis-2-directive.com/NIS_2_Directive_Articles.html
NOAA 2022, Guidance for Licensees - Cybersecurity？measures. Commercial Remote Sensing Regulatory？Affairs, 16 August 2022, pp.1-58. https://www.nesdis.noaa.gov/s3/2022-10/960.9%20(a)%201-3%20and%20960.10%20(a)(1)(i)%20(A%20&%20B)%20Guidance_%20Cybersecurity%20Measures_10032022.pdf
Northern SKY Research (NSR) 2022, Space Cybersecurity？- current state and future needs, [Internet], cited 2022？April 18, available from: https://www.nsr.com/nsr-space-cybersecurity-white-paper/
Pavur, J. & Martinovic, I. 2022, Building a Launchpad for？satellite cyber-security research: lessons from 60 years？of spaceflight, Journal of Cybersecurity, 8, 1-17. https://doi.org/10.1093/cybsec/tyac008

상세보기
Rajagopalan, R. P. 2019, Electronic and Cyber Warfare in？Outer Space, Space Dossier 3, UNIDIR. https://unidir.org/sites/default/files/publication/pdfs//electronic-and-cyber-warfare-in-outer-space-en-784.pdf
Schmitt, M. N. 2017, Tallinn Manual 2.0 on the International Law？Applicable to Cyber Operations, NATO Cooperative Cyber？Defence Centre of Excellence (Cambridge: Cambridge？University Press). https://doi.org/10.1017/9781316822524
Scholl, M. & Suloway, T. 2023, Introduction to Cybersecurity？for Commercial Satellite Operations, NIST IR 8270.？https://doi.org/10.6028/NIST.IR.8270
Starling, C. G., Massa, M. J., Mulder, L. C. C. P., & Siegel, J. T.？2021, The Future of Security in Space: A Thirty-Year US？Strategy, Atlantic Council Strategy Papers. https://www.atlanticcouncil.org/wp-content/uploads/2021/04/TheFutureofSecurityinSpace.pdf
Trump, D. 2020, Presidential Documents: Cybersecurity？Principles for Space Systems. Space Policy Directive-5？of Sept. 4, 2020, Federal Register, Vol.85, No.176,？[Internet], cited 2020 September 4, available from:？https://trumpwhitehouse.archives.gov/presidential-actions/memorandum-space-policy-directive-5-cybersecurity-principles-space-systems/
UK Space Agency 2020, Cyber Security Toolkit - Space？Assets. https://assets.publishing.service.gov.uk/media/5ec298a3e90e071e2f955ebc/Space_cyber_toolkit_final_v4.pdf
USSF, [Internet], cited 2023 Nov 10, available from: https://www.spaceforce.mil/News/Article/2230831/ussf-commercial-satcom-office-announces-development-of-new-security-program/

내보내기 구분	파일저장 인쇄 메일전송
구성항목	기본정보 상세정보 관리번호, 논문명, 저널/프로시딩명, 저자 , 발행년, 권, 호, 시작페이지, 끝페이지, 발행기관 관리번호, 논문명, 대등논문명, 저자 , 저널/프로시딩명, 발행기관, 발행년, 발행언어, 권, 호, 시작페이지, 끝페이지, ISBN, ISSN, 주제분야, 키워드, 초록(한글), 초록(영문), 저자(소속기관)
저장형식	Text(ASCII format) Excel format RefWorks Direct Export RIS format (for Reference Manager, ProCite, EndNote), Scholar's Aids, Mendeley
메일정보	받는사람 (필수) @ 보내는사람 (선택) @ 제목 내용 KISTI 검색결과 이메일 서비스
안내	총 건의 자료가 검색되었습니다. 다운받으실 자료의 인덱스를 입력하세요. (1-10,000) 검색결과의 순서대로 최대 10,000건 까지 다운로드가 가능합니다. 데이타가 많을 경우 속도가 느려질 수 있습니다.(최대 2~3분 소요) 다운로드 파일은 UTF-8 형태로 저장됩니다. 파일의 내용이 제대로 보이지 않을실 때는 웹브라우저 상단의 보기 -> 인코딩 -> 자동선택 여부를 확인하십시오. ~ Text(ASCII format) Excel format

연합인증

Efforts against Cybersecurity Attack of Space Systems 원문보기

Abstract ▼ AI-Helper

주제어

표/그림 (1)

표/그림 (1)

AI 본문요약
AI-Helper

제안 방법

성능/효과

참고문헌 (23)

이 논문을 인용한 문헌

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

연합인증

Efforts against Cybersecurity Attack of Space Systems 원문보기

Abstract ▼ AI-Helper

주제어

표/그림 (1)

표/그림 (1)

AI 본문요약 엑셀 다운로드 AI-Helper

제안 방법

성능/효과

참고문헌 (23)

이 논문을 인용한 문헌

관련 콘텐츠

원문 보기

원문 URL 링크

오픈액세스(OA) 유형

이 논문과 함께 이용한 콘텐츠

AI-Helper ※ AI-Helper는 오픈소스 모델을 사용합니다.

선택된 텍스트

AI 본문요약
AI-Helper