31 juillet 2019 | International, Aérospatial, Sécurité

The next cybersecurity concern for NATO? Space

By: Kelsey Reichmann

A new report warns that the cybersecurity vulnerabilities related to military space systems, specifically terminals and command-and-control systems, deserves renewed attention from NATO countries.

The report, titled “Cybersecurity of NATO's Spaced-based Strategic Assets,” was produced by Chatham House, which is part of the Royal Institute of International Affairs, a policy institute in London. The paper, by Beyza Unal, was released July 1.

“There is an urgent need to study and address cyber-related challenges to strategic assets within NATO and its key member countries, particularly the cyberthreat to space-based command and control systems,” the report read. “The increasing vulnerability of space-based assets, ground stations, associated command and control systems, and the personnel who manage the systems, has not yet received the attention it deserves.”

The report highlights cybersecurity vulnerabilities to space systems used by countries in the NATO alliance, notably singling out commercial products used in military operations as a particular risk. These vulnerabilities can come from back-door encryption, supply chain security, and personnel and procedural practices, according to the report. NATO uses space assets to defend territory, peacekeeping missions, humanitarian assistance and disaster relief, counterterrorism, and conflict prevention.

“There is an increasing need to apply higher-grade military hardening and cyber protection specifications to civilian capabilities that have the potential to be used in support of military applications,” the report read. “If military standards are not met, items procured from commercial industry with design flaws may expose NATO's systems to additional vulnerabilities."

The report also points to the importance of securing satellite terminals.

“Terminals located in ground stations constitute a critical vulnerability, as a terminal is an access point to a satellite and is usually not protected by authentication in order not to hinder operational actions,” the report said. “Terminals house software systems that can be compromised and require patching and upgrading.”

Data flowing between satellites, especially ground stations, can become vulnerable, according to the report.

“Adversaries infiltrating ground- or space-based systems could exploit weak software implementation, or the incompatibility of network or data transfer protocols in the chain,” the report read. “While the absence of data is easy to detect, the manipulation of data or erosion of confidentiality at such an interface is potentially more difficult to discern.”

Among the report's recommendations is that NATO strengthen its cyber defense through increased collaboration between the public and private sector. This would allow for more timely information sharing of cyberthreats.

The report also urges NATO to emphasize that commercial manufacturers meet basic cybersecurity standards and possibly more stringent military protection standards.

“In the future, military systems will be increasingly connected to non-military systems,” the report stated. “This has important implications for the laws of armed conflict, as the combination of civilian, commercial and military capabilities in the cyber domain and space raises the risk that civilian capabilities used for military purposes qualify as legitimate military targets.”

https://www.fifthdomain.com/international/2019/07/30/the-next-cybersecurity-concern-for-nato-space/

Sur le même sujet

  • Where the next iteration of the Army’s network capabilities is heading

    11 mai 2020 | International, C4ISR

    Where the next iteration of the Army’s network capabilities is heading

    Andrew Eversden The Army is finishing up a list of requirements for technologies it needs for the next round of its network modernization capabilities, known as Capability Set 23, one of the service's network leaders said May 6. The Army wants to have research and development contracts for prototypes signed no later than July, according to Maj. Gen. Peter Gallagher, director of the network cross-functional team for Army Futures Command. He added that the ongoing coronavirus pandemic has slowed the timeline. Capability set 23 is a follow-on effort to capability set 21, which is addressing current capability gaps in the Army's network with technology currently available, such as improved network transport capabilities. The service plans to deploy new network tools every two years starting in 2021 as part of a continuous network modernization plan. “We realized we weren't going to be multi-domain dominant with what we fielded in Cap Set '21,” said Gallagher, speaking May 6 at the C4ISRNET conference. For Capability Set '23, the service plans to take advantage of emerging technology, with developments from either commercial industry or internal researchers that are part of the Command, Control, Communications, Commuters, Cyber, Intelligence, Surveillance and Reconnaissance Center at Aberdeen Proving Ground. “The next steps for Cap Set '23 — it's about enhanced capacity in our network backbone,” said Gallagher. “High capacity, low latency communications that are not readily available today, but they're emerging in technology." The key piece for is medium-Earth and low-Earth orbit satellite constellations, which will provide the Army with significantly more bandwidth and reduced latency. “In some cases, it's kind of like having a fiber optic cable through a space-based satellite link,” Gallagher said. Gallagher added that Army plans to prototype the technology over the next year and added that around spring next year the Army plans to be working on the preliminary design review for Capability Set '23. Capability Set '23 will also expand on tools from Capability Set '21 to increase the resiliency of the Army's network. Gallagher said that the service is looking at advanced networking waveforms that can be effective in a contested environment. For Capability Set '23, the Army reviewed more than 140 white papers on capabilities and narrowed its selection to 12 papers that they thought would be ready for the second capability set iteration and will help “prototype and make some network design choices," Gallagher said. The Army then held a “shark tank” style event in March and is now “actively in discussions with vendors,” said Justine Ruggio, director of communications for the Network Cross Functional Team at Army Futures Command. Meanwhile, the Army is collecting feedback from soldiers on Capability Set '21 pilots and will procure those technologies this year. Initial delivery of the new capabilities to units is scheduled for second quarter of fiscal 2021, Gallagher said. https://www.c4isrnet.com/battlefield-tech/c2-comms/2020/05/07/where-the-next-iteration-of-the-armys-network-capabilities-is-heading/

  • Bouclier du ciel européen | L’Allemagne rallie 14 pays de l'OTAN pour renforcer la défense antiaérienne

    14 octobre 2022 | International, Aérospatial, C4ISR

    Bouclier du ciel européen | L’Allemagne rallie 14 pays de l'OTAN pour renforcer la défense antiaérienne

    Quatorze pays membres de l'OTAN se sont associés jeudi à l'Allemagne pour l'acquisition en commun de matériels de défense antiaérienne et antimissile dans le cadre d'une initiative baptisée « bouclier du ciel européen ».

  • Elbit Systems Awarded Approximately $300 Million Contract to Supply Defense Solutions for an International Customer

    26 mars 2024 | International, Terrestre

    Elbit Systems Awarded Approximately $300 Million Contract to Supply Defense Solutions for an International Customer

    The contract will be performed over a period of ten years.

Toutes les nouvelles