论文标题
SOK:建造有影响力的卫星网络安全研究的发射台
SOK: Building a Launchpad for Impactful Satellite Cyber-Security Research
论文作者
论文摘要
随着空间行业的快速变化时期,确保新兴和传统卫星任务的确保将变得至关重要。但是,系统安全社区在很大程度上忽略了太空技术。知识论文的这种系统化旨在理解为什么是这种情况,并为寻求地球中层以外有影响力的贡献的技术安全研究人员提供了一个起点。 本文始于从各种领域的相关威胁模型的跨学科综合,从法律和政策研究到航空工程。这被称为“威胁矩阵工具箱”,安全研究人员可以利用它来激励技术研究对给定的攻击向量和防御。随后,我们将该模型应用于过去60年的100多个重大卫星黑客事件的原始年表。共同使用这些来评估跨四个子订单的卫星安全性的最先进:卫星无线电链路安全性,太空硬件安全性,地面站安全性以及操作/任务安全性。在每个领域,我们都会注意到系统安全社区恰当地解决的其他学科中徘徊的重大发现和尚未解决的问题。通过巩固这项研究,我们介绍了卫星系统安全研究人员可以以强大但不同的学术基础为基础的案例,并崛起以满足对未来太空任务的迫切需求。
As the space industry approaches a period of rapid change, securing both emerging and legacy satellite missions will become vital. However, space technology has been largely overlooked by the systems security community. This systematization of knowledge paper seeks to understand why this is the case and to offer a starting point for technical security researchers seeking impactful contributions beyond the Earth's mesosphere. The paper begins with a cross-disciplinary synthesis of relevant threat models from a diverse array of fields, ranging from legal and policy studies to aerospace engineering. This is presented as a "threat matrix toolbox" which security researchers may leverage to motivate technical research into given attack vectors and defenses. We subsequently apply this model to an original chronology of more than 100 significant satellite hacking incidents spanning the previous 60 years. Together, these are used to assess the state-of-the-art in satellite security across four sub-domains: satellite radio-link security, space hardware security, ground station security, and operational/mission security. In each area, we note significant findings and unresolved questions lingering in other disciplines which the systems security community is aptly poised to tackle. By consolidating this research, we present the case that satellite systems security researchers can build on strong, but disparate, academic foundations and rise to meet an urgent need for future space missions.