🤖 AI Summary
This study addresses the open problem of risk management in space infrastructure networks by proposing the first Space Cyber Risk Management (SCRM) framework. The framework systematically models space infrastructures, missions, and adversarial behaviors, integrating risk analysis algorithms with NIST security control standards to enable comprehensive risk assessment and mitigation. Empirical evaluations demonstrate the critical importance of accounting for cascading effects, showing that the proposed hardening algorithm effectively safeguards mission execution while significantly reducing cyber risk. By bridging a notable gap in the field of space cyber risk management, this work provides both a theoretical foundation and practical tools for securing space infrastructure against evolving threats.
📝 Abstract
Space infrastructures play critical roles in modern society, including satellite communications (SATCOM). Like the Internet, space infrastructures are vulnerable to cyber attacks, or space cyber attacks, highlighting the importance of managing cyber risks to space infrastructures, or space cyber risks. However, adequately managing space cyber risks is an open problem. In this paper, we propose the first Space Cyber Risk Management (SCRM) framework to systematically analyze and mitigate space cyber risks. The framework models space infrastructures, space missions, and space cyber attacks, while offering algorithms for space mission risk analysis and hardening. We demonstrate its usefulness by conducting a case study on real-world space cyber attacks against the SATCOM infrastructure implemented in our testbed. Our results show, among other things, that: (i) dealing with space cyber attack cascading effects is essential to space cyber risk management; (ii) the framework can effectively harden space missions; (iii) National Institute of Standards and Technology (NIST) security controls can effectively mitigate space cyber risks.