Description

Topic 1: Introduction to Cybersecurity and Space Systems

T1.1 Fundamentals of Cybersecurity

• Basic principles (confidentiality, integrity, availability)
• Core cybersecurity concepts (threats, vulnerabilities, risk management)

T1.2 Overview of Space and Satellite Systems in Security context

• Space domain awareness (SDA) basics
• History and evolution of satellite technology
• Types of satellites, architecture and orbits (LEO, MEO, GEO, etc.)
• Ground stations and control networks
• Data transmission and communication protocols

Topic 2: Unique Cybersecurity challenges in Space

T2.1 The Basics:

• Physical access, remote operations, latency
• Communication delays and limited bandwidth
• Physical vs. cyber vulnerabilities in space assets

T2.2 Understanding the Adversary:

• Threat landscape for space systems (nation-state actors, cybercriminals, insider threats)

T2.3 Attack Vectors:

• Introduction to space-specific cyber threats (spoofing, jamming, data manipulation)
• Exploitation of outdated protocols and legacy systems

Topic 3: Cybersecurity Frameworks & Standards

T3.1 An overview of Cybersecurity Frameworks

• General frameworks (e.g., NIST, ISO/IEC standards)
• Adaptation challenges for the space domain

T3.2 Risk Assessments

• Tools and techniques tailored for space system environments
• Practical exercises in threat analysis and mitigation

T3.3 SpaDocs Framework:

• History, purpose, and scope of the SpaDocs framework
• In-depth exploration of the SpaDocs framework
• How SpaDocs addresses the unique cybersecurity needs of space and satellite systems
• Applying SpaDocs principles to risk assessment and mitigation
• Documentation and reporting requirements for SpaDocs compliance
• Practical examples and implementation guidelines
• Practical exercises for implementing SpaDocs

T3.4 NIST SP 800-39 (Managing Information Security Risk):

• Adapting NIST risk management framework to space systems
• Identifying and assessing space-specific risks
• Developing risk mitigation strategies

T3.5 Space Attack Research & Tactic Analysis (SPARTA):

• ICT matrix for the identification and sharing of space-cyber Tactic, Techniques, and Procedures (TTP)

T3.6 ISO 27001 (Information Security Management Systems):

• Implementing an ISMS for space organizations
• Auditing and certification processes

T3.7 CCSDS Security Standards:

• Overview of the Consultative Committee for Space Data Systems security standards
• How CCSDS standards are used to secure data transfer

Topic 4: Space Systems Architecture for Security Resilience

T4.1 Satellite Systems:

• Satellite operating systems and software
• On‑board systems security
• Payload security (sensors, data processing)
• Telemetry, tracking, and command (TT&C) systems
• TT&C vulnerabilities
• Hardware security (radiation hardening, tamper resistance)

T4.2 Communication Protocols & Networks:

• Satellite communication protocols (e.g., CCSDS) and their security implications
• Data links and signal processing
• Encryption, authentication, and secure communication
• Quantum communication and its potential for secure space systems

T4.3 Data Platforms & Security

• Encryption and key management for space data
• Data integrity and authenticity verification

T4.4 Ground Segment Security:

• Ground station network security (firewalls, intrusion detection)
• Data center security (physical and logical access controls)
• Communication link security (encryption, authentication)
• Supply chain security for ground equipment

Topic 5: Secure System Design & Engineering

T5.1 Hardware & Software Security:

• Secure design principles for satellite components
• Firmware integrity and secure boot processes

T5.2 Supply Chain & Component Verification:

• Ensuring cybersecurity throughout the manufacturing and launch phases
• Strategies for managing third‑party risks

T5.3 Encryption & Key Management:

• Cryptographic protocols suited for the space environment
• Practical considerations in key distribution and management

Topic 6: Threat Modelling for Space Systems

T6.1 Threat Modelling:

• Identifying potential attack vectors and threat actors
• Identifying potential entry points from ground stations to orbiting assets
• Developing attack trees and threat scenarios
• Using threat modelling tools (e.g., STRIDE, DREAD)

T6.2 Vulnerability Analysis

• Vulnerability assessments and penetration testing
• How to perform ethical hacking on space related systems
• Understanding the limitations of penetration testing on live satellites
• Using simulation software to perform vulnerability assessments

T6.3 Real-world case studies

• Real‑world case studies of communication breaches

Topic 7: Operational Security & Incident Response

T7.1 Security Operations in Space:

• Real‑time monitoring of satellite and ground systems
• Cybersecurity challenges during mission control operations

T7.2 Incident Response Planning:

• Developing and executing incident response plans specific to space systems & missions
• Establishing incident response teams and procedures
• Post‑incident analysis and recovery strategies
• Forensics of space based cyber attacks

T7.3 Simulated Exercises:

• Simulating incident response scenarios (tabletop exercises)
• Evaluating and refining response protocols

Topic 8: Emerging Technologies & Future Trends

T8.1 Artificial Intelligence (AI) and Machine Learning (ML) in Space Cybersecurity:

• Role of AI/ML for threat detection, anomaly analysis and response
• Autonomous cybersecurity for satellite systems
• The ethical implications of AI in space security

T8.2 Quantum Computing and Post-Quantum Cryptography:

• Potential of quantum cryptography for securing satellite communications
• The impact of quantum computing on space cryptography
• Implementing post-quantum cryptographic algorithms

T8.3 Space Domain Awareness (SDA) and Cyber Defense:

• Integrating SDA data into cybersecurity operations
• Developing active cyber defense capabilities for space systems

T8.4 Emerging Threats & Resilience:

• Evolving cyber threats in an increasingly connected space environment
• Adaptive cybersecurity and resilience strategies

T8.5 Research & Development:

• Open challenges and areas for future research in space cybersecurity
• Collaboration between academia, industry, and government agencies

T8.6 International Cooperation and Policy:

• Review of international treaties and agreements related to space cyber security
• The role of international organizations in promoting space cybersecurity
• Discussions on responsible behaviour in space cyberspace