Space Systems Cybersecurity Recommendations
Booz Allen’s expertise spans all critical areas of cybersecurity for space operations—from the edge to the ground. We suggest a three-pronged approach to agencies working to address cybersecurity for their space platforms. Our approach focuses on mission relevance, resilience, and analytics.
1. Identify mission-relevant threats and vulnerabilities
Integrated cybersecurity approaches enable mission readiness and operations. By mapping a system’s architecture and how it interfaces with other systems, and understanding its role in a concept of operations, organizations can see more clearly how adversaries’ sophisticated tactics, techniques, and procedures could threaten vital systems.
What functions are critical to mission success? What are the impacts to the mission if its functions are compromised? What value does the data this system uses or produces have to an adversary? These are primary considerations for discovering mission-relevant vulnerabilities.
From here, space agencies can address vulnerabilities by prioritizing potential threats and developing plans to control ongoing and emerging risks. In this way, agencies can lay a foundation for resilient operations.
2. Build resilient operations
Even with the best cybersecurity plans in place, the most secure systems must still be treated as if they are compromised. And critical systems must be able to operate through disruptive attacks so they continue to perform their missions. This is especially true for space-based platforms.
After developing a comprehensive understanding of mission-relevant threats and vulnerabilities, space agencies can develop the necessary measures to introduce resilience into the system.
New systems should be designed with resilience in mind. Mapping cyber requirements through the use of model-based systems engineering, which focuses on functionality, can help identify gaps in the current architecture. Understanding that space-based platforms often operate semi-autonomously, system engineers can develop mechanisms whereby the system can identify vulnerabilities or an attack independently – and then autonomously take steps to mitigate those risks.
When modernizing legacy platforms, resilience can come in many forms—from shutting down compromised functions to enacting obfuscation techniques.
3. Use analytics to empower resilience techniques
The space community is already using analytics to turn data into intelligence and to assess risk in space systems, but advanced analytics can improve resilience, too. Advanced analytics can provide insights into the entire attack surface rooted in a greater understanding of how a myriad of systems interface with each other. This, in turn, can help identify and prioritize risk management challenges.
Extending the reach of analytical risk management tools across the threat surface—from the edge to the ground—can uncover new opportunities to make the nation’s systems more resilient. Agencies can use insights gained from this approach to make better decisions when identifying, prioritizing, and addressing potential risks to critical operations.
