31 juillet 2019 | International, Aérospatial, Sécurité

The next cybersecurity concern for NATO? Space

By: Kelsey Reichmann

A new report warns that the cybersecurity vulnerabilities related to military space systems, specifically terminals and command-and-control systems, deserves renewed attention from NATO countries.

The report, titled “Cybersecurity of NATO's Spaced-based Strategic Assets,” was produced by Chatham House, which is part of the Royal Institute of International Affairs, a policy institute in London. The paper, by Beyza Unal, was released July 1.

“There is an urgent need to study and address cyber-related challenges to strategic assets within NATO and its key member countries, particularly the cyberthreat to space-based command and control systems,” the report read. “The increasing vulnerability of space-based assets, ground stations, associated command and control systems, and the personnel who manage the systems, has not yet received the attention it deserves.”

The report highlights cybersecurity vulnerabilities to space systems used by countries in the NATO alliance, notably singling out commercial products used in military operations as a particular risk. These vulnerabilities can come from back-door encryption, supply chain security, and personnel and procedural practices, according to the report. NATO uses space assets to defend territory, peacekeeping missions, humanitarian assistance and disaster relief, counterterrorism, and conflict prevention.

“There is an increasing need to apply higher-grade military hardening and cyber protection specifications to civilian capabilities that have the potential to be used in support of military applications,” the report read. “If military standards are not met, items procured from commercial industry with design flaws may expose NATO's systems to additional vulnerabilities."

The report also points to the importance of securing satellite terminals.

“Terminals located in ground stations constitute a critical vulnerability, as a terminal is an access point to a satellite and is usually not protected by authentication in order not to hinder operational actions,” the report said. “Terminals house software systems that can be compromised and require patching and upgrading.”

Data flowing between satellites, especially ground stations, can become vulnerable, according to the report.

“Adversaries infiltrating ground- or space-based systems could exploit weak software implementation, or the incompatibility of network or data transfer protocols in the chain,” the report read. “While the absence of data is easy to detect, the manipulation of data or erosion of confidentiality at such an interface is potentially more difficult to discern.”

Among the report's recommendations is that NATO strengthen its cyber defense through increased collaboration between the public and private sector. This would allow for more timely information sharing of cyberthreats.

The report also urges NATO to emphasize that commercial manufacturers meet basic cybersecurity standards and possibly more stringent military protection standards.

“In the future, military systems will be increasingly connected to non-military systems,” the report stated. “This has important implications for the laws of armed conflict, as the combination of civilian, commercial and military capabilities in the cyber domain and space raises the risk that civilian capabilities used for military purposes qualify as legitimate military targets.”

https://www.fifthdomain.com/international/2019/07/30/the-next-cybersecurity-concern-for-nato-space/

Sur le même sujet

  • The US Air Force is asking for hypersonic weapon ideas as a new arms race with China and Russia heats up

    4 septembre 2018 | International, Aérospatial

    The US Air Force is asking for hypersonic weapon ideas as a new arms race with China and Russia heats up

    Ryan Pickrell The US Air Force put out an open-ended request Thursday for hypersonic weapon concepts and development programs from qualified vendors with experience related to hypersonic platforms. The call comes amid an escalating arms race with China and Russia, both of whom have been actively testing new hypersonic systems. A hypersonic weapon is decidedly dangerous because its speed coupled with its unpredictable flight patterns make it almost impossible for existing air and missile defense systems to effectively intercept. "The homeland is no longer a sanctuary," Air Force Gen. Terrence O'Shaughnessy, head of US North Command, saidrecently. With rivals China and Russia rapidly developing hypersonic weapons able to penetrate defenses to deliver devastating strikes on their enemies, the US Air Force is preparing to enter the arms race in a big way, signaling that the US is not yet ready to cede its competitive advantage in advanced weaponry to adversarial competitors. The Air Force posted a contracting announcement online Thursday calling for qualified vendors experienced in hypersonic aerodynamics, aerothermal protection systems, advanced hypersonic guidance, navigation and control, solid rocket motors, and so on to assist the service in research on "hypersonic weapon rapid development, production and sustainment." The multi-award contract, as The Drive first reported, appears to be an open-ended request for any and all hypersonic concepts and development programs. The Air Force awarded Lockheed Martin a contract in August for an Air-Launched Rapid Response Weapon (ARRW), a hypersonic weapon and the second such contract offered by the Air Force this year. The service awarded a contract to Lockheed in April for a Hypersonic Conventional Strike Weapon (HCSW). The Air Force reportedly has four different hypersonic weapons programs in the works for the B-52, according to The Drive, as well as submarine-launched and ground-launched systems in development. And, there could certainly be more. The newfound interest in hypersonic weaponry comes after repeated warnings from senior military officers suggesting that the US was losing its edge to peer competitors. "China's hypersonic weapons development outpaces ours... we're falling behind," Adm. Harry Harris, the former head of US Pacific Command (now called Indo-Pacific Command), said in February. The head of US Strategic Command warned in March that the US needs to bolster its defenses, explaining to the Senate Armed Services Committee that the US does not "have any defense that could deny the employment of such a weapon against us." The recently-signed 2019 National Defense Authorization Act approves investments in America's missile defense capabilities in the face of certain emerging threats from US rivals. "The homeland is no longer a sanctuary," Air Force Gen. Terrence O'Shaughnessy, head of US North Command, said recently. "We're in a changing security environment. We used to think about the sanctuary we had with oceans and friendly countries to our north and south, but that's changing with adversaries that are actually able to reach out and touch us now." In the beginning of August, China tested the Xingkong-2 (Stary Sky-2) hypersonic experimental waverider vehicle able to fly at speeds as high as Mach 6. The hypersonic aircraft reportedly has the potential to be used as a hypersonic strike platform capable of carrying conventional and nuclear payloads and evading modern air and missile defenses. China, which has made the development of hypersonic systems a national priority, called the test a "huge success." Russia has also been experimenting with advanced hypersonic systems. For instance, Russia is expected to deploy its Avangard hypersonic boost-glide vehicle on the country's Sarmat intercontinental ballistic missile within the next year or so. The Russians are also developing the hypersonic Kinzhal (Dagger) cruise missile, which could be ready for combat by 2020. While the weapon has only been tested on a MiG-31 fighter, Russia reportedly intendsto mount the weapon on a strategic bomber. https://www.businessinsider.com/the-us-air-force-asking-for-hypersonic-weapon-ideas-2018-9

  • Boeing to deliver first T-7 to US Air Force, outlines testing plans

    12 septembre 2023 | International, Aérospatial

    Boeing to deliver first T-7 to US Air Force, outlines testing plans

    The first two T-7s will head to Edwards Air Force Base in California this fall, and a third will undergo testing on extreme weather conditions elsewhere.

  • The Tech Companies That Are Eager to Sell AI to the Pentagon

    14 novembre 2018 | International, C4ISR

    The Tech Companies That Are Eager to Sell AI to the Pentagon

    BY DAVE GERSHGORN The Pentagon's AI shopping list is similar to a Silicon Valley company's: fast data organization, predictive maintenance, and mitigation for threats. While Silicon Valley workers continue to protest their employers selling artificial intelligence products to the US military, the US military is still looking to spend money on AI. The Army Research Lab, the Project Maven team, and the USDepartment of Defense's Joint Artificial Intelligence Center will host technology companies later this month in Maryland, where the government will view private demonstrations. According to federal contracting data (free login required for the full list), large tech companies such as Intel, IBM, GE, Oracle, as well as defense company Raytheon, have expressed interest in showing off their AI for the military. Absent from the list are AI giants such as Google, Microsoft, and Amazon, though the DoD has not responded to an inquiry as to whether the available contracting data is the complete list of attending organizations. The DoD's needs aren't too different from those of a Silicon Valley tech company, though the technology is unlikely to be used in a food delivery app or search engine. The military is looking for help organizing and standardizing its data, tools to create AIalgorithms, and infrastructure to test and deploy those algorithms. Some of the military's uses are similar to commercial applications for AI, like predictive maintenance and translation, though other use cases include analyzing drone footage and “force protection,” which means mitigating potential threats to the military. Project Maven, in particular, is focused on tech that autonomously extracts information from still or moving imagery. Smaller, more specialized tech firms from outside of Silicon Valley are also vying for government contracts. Descartes Labs, which uses artificial intelligence to analyze satellite imagery, is planning to attend the industry day and give a demo. Descartes Labs' government programs director, Steven Truitt, tells Quartz the company plans to discuss a super-computing platform for the intelligence community and “defense information awareness missions.” A competitor, Orbital Insight, has also indicated interest in the event. Of the 42 businesses interested in attending the event, six are owned by veterans, according to the contracting documents. John Merrihew, VP government solutions at AI contractor Veloxiti, says his military experience puts him in a different category of tech company than Silicon Valley. “I'm an Army retiree after 24 years and a half-dozen combat tours, so I have an obligation to [provide this technology],” Merrihew told Quartz. “I'm not a guy out on the west coast who's made a lot of money like Google. All of my engineers have security clearances, so we're pretty bought in on trying to help the military in this area.” https://www.defenseone.com/technology/2018/11/tech-companies-are-eager-sell-ai-pentagon/152800/

Toutes les nouvelles