• From April 26th to 27th, 2023, the third CYSAT focusing on aerospace cybersecurity will be held at Station F, Paris, France. At the event, the European Space Agency (ESA) built a satellite test bed to simulate the scenario of an attempt to seize control of OPS-SAT. OPS-SAT is a micro-nanosatellite used by the European Space Agency for demonstration purposes.
• Thales' Offensive Cyber Security team took on the challenge, identifying vulnerabilities that could allow malicious actors to disrupt ESA satellite operations.
• The results of this satellite cyber attack exercise, the first of its kind in the world, will be used to strengthen the security of satellites and their onboard applications, help improve the cyber resilience of space systems, protect sensitive data and support the long-term success of space programs
The European Space Agency (ESA) has challenged the space ecosystem's cybersecurity experts with the ability to disrupt the operation of the agency's OPS-SAT demonstration satellite. Participants used various hacking techniques to gain control of the GPS, Attitude Control System 1 and onboard camera systems used to manage the payload. Unauthorized access to these systems could cause severe damage to satellites and even lead to loss of mission control. Thales' Offensive Cyber Security team completed this special exercise in collaboration with the Group's Information Technology Security Evaluation Facility (ITSEF2), confirming the need for a high level of cyber resilience in a specific space operating environment.
A Thales team of four cybersecurity researchers accessed the onboard system, used standard access permissions to control its application environment, and then exploited the vulnerability to inject malicious code into the satellite system. The move could corrupt data sent back to Earth, in particular by modifying images captured by spaceborne cameras, and achieve goals such as obscuring selected geographic areas in satellite imagery to conceal local activity from detection by ESA. The exercise was organized exclusively for CYSAT to assess the potential impact of a real cyber attack and the consequences on civilian systems.
ESA will retain access to the satellite system throughout the exercise in order to resume normal operations after the demonstration.
Pierre-Yves Jolivet, Vice President Cyber Solutions, Thales Group, said , "Thales is grateful to the European Space Agency and the CYSAT organizers for this unique opportunity to demonstrate the ability of our dedicated team to identify vulnerabilities in satellite systems. Today, With more and more military and civilian applications relying on satellite systems, the aerospace industry needs to consider cybersecurity issues at every stage of the satellite life cycle. From initial design to system development and maintenance, cybersecurity issues need to be fully considered. This unprecedented exercise is an opportunity to increase awareness of potential flaws and vulnerabilities so that they can be remedied more effectively and align current and future solutions to improve the cyber resilience of the satellite and space program as a whole, including its ground segment and on-orbit systems.”
During presentations by Thales experts and ESA team members on 27 April, CYSAT participants can learn more about the offensive cybersecurity techniques, tactics and procedures applied in the first demonstration.
Thales' Cybersecurity Capabilities in Space
With more than 40 years of experience in cybersecurity and space missions, Thales applies the principles of "cybersecurity by design" to the products it develops for satellite operators and space agencies. Thales Alenia Space, a joint venture between Thales and Leonardo, designs and manufactures space for communications, navigation, Earth observation, environmental monitoring, exploration, scientific research and orbital infrastructure. Provide innovative solutions. Thales has more than 3,500 cyber security experts who help ensure the security of national and European space programs (especially Europe's Galileo satellite navigation program) and satellite systems at an international level. With its combined expertise in cutting-edge satellite systems and cybersecurity solutions incorporating the latest military technologies, Thales offers government, institutional and corporate customers a comprehensive range of cybersecurity solutions to ensure that all elements of space systems are effectively Protect. Thales' offensive cybersecurity capabilities demonstrated at CYSAT enable customers to effectively anticipate and respond to current and future threats. Thales provides a full range of cyber security solutions for the aerospace industry, including risk and threat assessment, data protection and cyber security, incident detection and response, and security maintenance throughout the system life cycle.
About Thales
As one of the world's leaders in advanced technology, Thales (Euronext: HO) focuses on aviation, aerospace, digital identity and security, and develops solutions for a safer, greener and more inclusive world. products and solutions.
The Group invests about 4 billion euros in research and development each year in key technologies, such as quantum technology, edge computing, 6G and network security.
Thales has 770,001 employees in 68 countries around the world. In 2022, the group's sales revenue will reach 17.6 billion euros.