White House publishes a cyber-security rulebook for space systems

guest · Sep 4, 2020

White House publishes a cyber-security rulebook for space systems
September 4, 2020
https://www.zdnet.com/article/white-house-publishes-a-cyber-security-rulebook-for-space-systems/

The White House has published today a new directive detailing a list of recommendations and best practices for protecting space systems from cyber-threats and cyber-attacks.

The new rules, detailed in Space Policy Directive-5 (SPD-5), are meant to establish a cybersecurity baseline for all space-bound craft, systems, networks, and communications channels built and operated by US government agencies and commercial space entities.

"Examples of malicious cyber activities harmful to space operations include spoofing sensor data; corrupting sensor systems; jamming or sending unauthorized commands for guidance and control; injecting malicious code; and conducting denial-of-service attacks," said officials.
According to SPD-5, these threats could be mitigated through a set of best practices, already well-established, and applied in other industry sectors.
Click to expand...

Space systems and supporting infrastructure must also be developed and operated by engineers with cyber-security training, the White House said.

"Effective and validated authentication or encryption" should also be used for protecting command, control, and telemetry functions from unauthorized entry.
In case threats are detected, the operators of US space systems should also work to share threat, warning, and incident information with industry partners via Information Sharing and Analysis Centers (ISACs).
Click to expand...

White House: Memorandum on Space Policy Directive-5—Cybersecurity Principles for Space Systems

Space systems enable key functions such as global communications; positioning, navigation, and timing; scientific observation; exploration; weather monitoring; and multiple vital national security applications. Therefore, it is essential to protect space systems from cyber incidents in order to prevent disruptions to their ability to provide reliable and efficient contributions to the operations of the Nation’s critical infrastructure.
Click to expand...

guest · Nov 17, 2021

CISA working group assessing cyber risks to space infrastructure
November 16, 2021
https://www.fedscoop.com/cisa-space-infrastructure-risk-assessment/

The Cybersecurity and Infrastructure Security Agency established a cross-sector space working group that is performing an assessment of risks to both federal and commercial space infrastructure, said Assistant Director Bob Kolasky.

CISA’s primary concern is mitigating cyber risks to position, navigation and timing (PNT) services and GPS, Kolasky said, during an AFCEA Bethesda event on Tuesday.
The agency already examined all 55 national critical functions — ones government and the private sector perform that, if corrupted, would be detrimental to national security — as they relate to space.

“We have to think about space as a potential risk vector to national critical functions and space infrastructure as critical infrastructure,” Kolasky said.
Click to expand...

The agency is also exploring ways to extend the benefits of investments in national security systems to commercial space missions working with the Department of Defense.
Click to expand...

guest · Jan 4, 2023

NIST Finalizes Cybersecurity Guidance for Ground Segment of Space Operations
By Eduard Kovacs @EduardKovacs - January 4, 2023

The National Institute of Standards and Technology (NIST) has published the final version of its guidance on applying the Cybersecurity Framework to the ground segment of space operations, specifically satellite command and control.
Click to expand...

NIST’s widely used Cybersecurity Framework consists of standards, guidelines and practices for protecting critical infrastructure. This voluntary framework is designed to help organizations manage their cybersecurity risks.

The NIST Interagency Report (IR) 8401 aims to apply the Cybersecurity Framework to satellite command and control, creating a profile for the space sector’s ground segment in an effort to help stakeholders manage risk. The goal of the profile is to complement existing security measures in an organization.
Click to expand...

NIST’s guidance comes in response to the US government viewing space as an increasingly important element of critical infrastructure.

“A loss or degradation of space services could significantly impact the security and economic well-being of the United States,” NIST said. “The United States Government recognizes that government-owned space operations can be augmented through activities such as the leasing of commercial communications satellite (COMSAT) bandwidth, commercial space-based telecommunication services, the purchase of commercial imagery, and the use of commercial satellite buses to host payloads and other capabilities.”
Click to expand...

NIST’s new Cybersecurity Framework profile can help organizations that own or operate space systems identify systems and processes related to the command and control of space vehicle buses and payloads, identify threats, protect systems, detect loss of confidentiality, integrity or availability, respond to incidents, and quickly recover from anomalies.
Click to expand...

Log in or Sign up

White House publishes a cyber-security rulebook for space systems

guest Guest

guest Guest

guest Guest

Log in or Sign up

White House publishes a cyber-security rulebook for space systems

guest Guest

guest Guest

guest Guest

Useful Searches