Designating Space as Critical Infrastructure: Threats and Protections

The Case for Designating Space as Critical Infrastructure

• 🛰️ With over 11,833 active satellites, a significant portion being commercial, humanity is increasingly reliant on space-based assets for everyday functions, including GPS.
• 💡 The discussion centers on whether space should be officially designated as critical infrastructure to ensure its security.
• ⚖️ While official designation can bring increased regulations and scrutiny, it also unlocks access to government resources, such as threat intelligence sharing and cybersecurity assessments.

Understanding Space-Based Threats

• ⚠️ Nation-state actors, like China, Russia, and Iran, pose significant threats to space infrastructure, possessing advanced capabilities to target even isolated systems.
• 💻 A real-world example demonstrated hackers exploiting Viasat satellite modems from Earth using software-defined radios, highlighting vulnerabilities that could be exploited by well-funded adversaries.
• 🎯 These attacks, even on shoestring budgets by researchers, indicate the potential for sophisticated cyberattacks on satellites, especially given their inherent connection to global networks.
• 💥 In a conflict scenario, such as a potential war over Taiwan, space-based assets are likely to be among the first targets.

Typical Attacks and Vulnerabilities

• 🔍 Attacks on space infrastructure are not entirely novel, often mirroring standard network attacks applicable to other computer systems, including basic methods like SQL injections.
• 🔑 Nation-states actively seek and stockpile zero-day vulnerabilities – previously unknown flaws for which no patches exist – to exploit space infrastructure.
• 🚀 The nature of space assets, being connected to networks, makes them susceptible to terrestrial cyber threats, underscoring the need for robust security measures.

Strengthening Space Cybersecurity

• 🤝 Collaboration and threat information sharing are crucial, with organizations like the Space ISAC playing a vital role for companies of all sizes.
• 🔒 Hiring a Chief Information Security Officer (CISO) is essential, not only for security but also for improving company valuations, as cyber defenses are increasingly scrutinized by investors.
• 📈 Attacks from adversaries like China have been observed to correlate with significant investment announcements, indicating a targeting of newly funded companies for their intellectual property.
• 🛠️ Companies should focus on building their cyber workforce by hiring individuals who can be trained on the job, leveraging certifications and online resources, rather than solely relying on highly qualified but expensive experts.

The New Great Game

• 🌍 The current geopolitical landscape is described as a "new great game," a struggle between authoritarian states and democracies over the control and security of the internet and cyberspace, with space being a key battleground.
• 🌐 Protecting space infrastructure is vital to ensuring a free, fair, and secure internet and digital lives against authoritarian influence.
• ⏳ This conflict is expected to shape global dynamics for the next 20 years, emphasizing the ongoing importance of securing cyberspace, including outer space.