Cyber Security Awareness for SmallSat Ground Networks

Satellite ground networks are exposed to an increasing number of targeted cyber threats. Successful cyber-attacks have resulted in substantial data leaks and billions of dollars in material damages. SmallSat ground networks have distinct cyber security challenges associated with mission-unique equipment; specialized protocols; untimely patching due to configuration freezes and high regression test costs; and tight budgetary constraints. Recognizing that SmallSat ground network operators may lack the resources and budgets of traditional satellite ground operators, it is beneficial to leverage lessons learned, frameworks and tools from Government and Industry to help better defend their networks. This paper is intended to be a security primer for SmallSat ground network operators, discussing security best practices such as Information Assurance (IA) hardening and continuous monitoring; leveraging frameworks such as Defense Information Systems Agency (DISA) Security Technical Information Guides (STIGs); and tools such as Security Information & Event Managers (SIEM) and Security Content Automation Protocol (SCAP) compliant applications. Beyond the technical controls that are often the initial thought for network designers, a solid security program must include policies and procedures to help manage the security and organizational needs of the ground network. The National Institute of Standards and Technology (NIST) publishes guides and frameworks that should be used to help establish and drive policy