Cybersecurity Concerns in Space-Based Systems

The cybersecurity of satellites, spacecraft, and other space-based systems continues to lag behind current threats, despite efforts by the National Aeronautics and Space Administration (NASA) to require that contractors shore up electronic protections for the hardware and software provided to the US space program.

Deregulation and Lack of Standards

The Trump administration’s efforts to deregulate private industry are accelerating the growth of cybersecurity gaps in space-based systems. Elon Musk, the CEO of SpaceX, has pushed back on regulations for commercial providers, including SpaceX, the dominant maker of private launch systems and spacecraft. The company accounted for more than half (52%) of 259 worldwide launches in 2024.

Threats to Space-Based Systems

Threats to space-based systems have increased. Russia-linked hackers disrupted satellite communications in Ukraine during the opening months of its invasion, and researchers are concerned about the potential satellite-hacking capabilities of China and Iran.

Industry’s Response

Spacecraft manufacturers are not proactively doing enough to ensure cybersecurity best practices, as evidenced by the original need for the Spacecraft Cybersecurity Act and the lack of progress in adopting large-scale changes since its proposal. Industry leaders recognize that the systems they produce for the public and private sectors are potential adversary targets.

NASA’s Efforts

NASA has focused on organizational and terrestrial cybersecurity, but the focus on cyber protection for space-based systems and communications is relatively recent. In 2019 and 2023, NASA issued its first guidelines to secure spacecraft, such as the Orion Multi-Purpose Crew Vehicle, but has not incorporated the requirements into its acquisition policies.

Regulatory Challenges

A single private citizen, Elon Musk, has wielded significant influence over the US government, which may hinder the development of more stringent cybersecurity requirements for space-based infrastructure and commercial contractors.

Hope for Improvement

A few weeks into the second Trump administration, experts are split on whether cybersecurity will be a focus in the push to ramp up the United States’ efforts in space. However, NASA has already issued a best-practices guide for securing space systems in 2023, and the agency is likely to continue to prioritize cybersecurity efforts.

Conclusion

The cybersecurity of space-based systems is a pressing concern that requires attention and action from the industry, government, and international organizations. While there are challenges ahead, there is hope for improvement, and the industry must take responsibility for ensuring the security of its products and systems.