The European Union Agency for Cybersecurity (ENISA) has released an analysis of the cybersecurity threats to the space sector to strengthen the resilience of commercial satellites. The objective of the ENISA space threat landscape is to identify and assess the cybersecurity threat landscape for commercial satellites – exploring existing and emerging challenges for the industry. It also recommends cybersecurity controls and mitigation strategies for a trustworthy and uninterrupted deployment of commercial satellite systems and architectures. Such controls and strategies are the result of the identification and assessment of both current and emerging threats and vulnerabilities faced by the space sector.
Targeted at a wide audience, including representatives of the public/government sector and the space industry, technical and cybersecurity communities, as well as academia, standardization bodies, civil society organizations, and the interested public, the ENISA space threat landscape outlined key cybersecurity challenges faced by the commercial satellite industry. It explores existing and emerging cybersecurity challenges in the satellite industry.
These include supply chain risks, with the space sector heavily dependent on complex global supply chains; use of third party Commercial Off-the-Shelf (COTS) components; legacy systems, due to the remote nature and location of space systems; limited visibility, again related to the remote nature of the space systems; weak configuration, primarily found in the lack of cryptographic technologies; human error, since space systems dependent on a high degree of human interaction in all phases of their lifecycle; and the threat of sophisticated cyber-attacks, launched by skilled and capable threat actors.
“The commercial exploitation of space has become the backbone of key economic activities,” Juhan Lepassaar, executive director at ENISA, stated in a Wednesday media statement. “Digital threats in space are therefore highly critical. Besides, their cascading effect have also the potential to induce geopolitical tension. This is why commercial satellites must be cyber secured at all cost.”
Threat actors of space systems or objects include state-nexus actors, cybercrime and hacker-for-hire ones, private sector offensive actors (PSOA), hacktivists, or civil activists, among others. The main threats include jamming, hijacking, and computer network exploitation.
The ENISA space threat landscape report identifies key risks and challenges to the security of space systems. These include supply chain risks that arise from vulnerabilities in global supply chains, where both software and hardware components can be compromised. The reliance on Commercial Off-The-Shelf (COTS) components increases exposure to malicious actors due to publicly available information.
Also, the use of legacy systems that often lack modern security features ends up making them vulnerable to cyberattacks. Limited visibility complicates incident detection and response, while inadequate cryptographic mechanisms can lead to unauthorized access. Additionally, human error and the threat of sophisticated cyber attacks from nation-state actors further heighten security concerns.
The space threat landscape report aims to lay the groundwork for a trustworthy and uninterrupted deployment of commercial satellite systems and architecture by understanding potential cyber-related risks, threats, and vulnerabilities. Focus is placed on cybersecurity threats and vulnerabilities across the satellite lifecycle and associated actors and assets identified as crucial components of satellite systems.
Specific objectives include a definition of a generic commercial space system lifecycle model as well as the identification and analysis of satellite assets taxonomy, considering the stakeholders involved in respective lifecycle phases, interdependencies between the phases, groupings based on the lifecycle, as well as identifying their respective asset segments, i.e. ground-space-user. It also aims to correlate a list of threats, threat actors, and vulnerabilities, mapping them against a list of identified satellite assets. By examining potential threats, this report aims to provide insights into the vulnerabilities that may exist within existing and developing satellite projects.
ENISA listed that it also seeks to provide a sescription of sample cyber-attack scenarios and failure models pertinent to various stages in the core commercial satellite lifecycle; and development of recommendations for effective and practical cybersecurity controls and mitigation strategies for the commercial space industry, helping them protect their assets and ensure the continued safe and secure operation of space infrastructure.
Overall, the space threat landscape report endeavours to provide a holistic perspective on the cybersecurity challenges faced by commercial satellites. By identifying potential threats and vulnerabilities and providing a cybersecurity controls framework, the report aims to equip stakeholders in the commercial satellite sector with the knowledge and insights needed to bolster the resilience and security of satellite systems in the face of evolving cyber threats.
The Space Threat Landscape report includes an overview of the satellite lifecycle model and actors, of asset taxonomies, and space threats. In addition, a risk assessment analysis was performed using risk scenarios to address the threats identified in the threat taxonomy. These risk scenarios illustrate the potential effects of adverse events on commercial satellite infrastructure and services. It incorporates a generic lifecycle model, asset taxonomy, and threat taxonomy, along with real-life incidents for context. Each scenario details the emerging threats, at-risk assets, and potential threat actors, considering their capabilities and motivations.
The analysis includes cascading effects and evaluates impact using the CIA triad, supplemented by a high-level PESTLE analysis. Relevant threats are classified based on their impact, likelihood, intentionality, and cascading effects during risk assessments.
It provides an extended cybersecurity control framework tailored to the needs of commercial satellite operators. The framework is composed of a total of 125 items divided into 35 sub-categories. To facilitate practical implementation, the framework data are provided in a structured, digital format, alongside an interactive tool for exploration and analysis. These controls provide clear and concise recommendations on the implementation and use of appropriate cybersecurity controls, presented in the form of a sample cybersecurity control framework.
The listed controls are derived from existing EU regulations, international cybersecurity frameworks, cybersecurity profiles tailored to the space sector, best practice guides, taxonomies of countermeasures, and national guidelines. They are mapped against specific threats identified in the threat taxonomy and applied across relevant phases of the lifecycle. Aiming for general applicability, the controls can be further tailored depending on the nature and needs of a specific mission.
The ENISA Space Threat Landscape report emphasizes the need for clear policies and procedures to ensure all stakeholders understand their security roles and responsibilities. Compliance with legal and regulatory requirements is crucial, involving independent audits to identify gaps. Risk management focuses on identifying, assessing, and mitigating risks throughout the lifecycle, including threat modeling and business impact analysis. The concept of security by design and by default promotes secure development practices, while environmental and physical security ensures the protection of ground infrastructure and satellite components from unauthorized access and tampering.
It also calls for a focus on network security to ensure resilient communication, data security for protecting data confidentiality and integrity, and vulnerability management to identify and address technical vulnerabilities. It emphasizes access management based on zero-trust principles to prevent unauthorized access, asset management for effective lifecycle management of systems and data, and supply chain management to ensure resilience in outsourced services. Lastly, it highlights the importance of monitoring and alerting to detect suspicious activities and enhance response capabilities.
The Space Threat Landscape report also included cybersecurity incident management and resilience. Incident Response focuses on establishing capabilities to address detected events, including defined thresholds and communication plans. Business continuity management/disaster recovery ensures critical operations can continue or resume after disruptions.
It also covers capacity building and emphasizes training and awareness for stakeholders regarding cybersecurity threats. Testing involves regularly assessing processes and systems to identify gaps, while continuous improvement promotes integrating feedback from tests and audits into the cybersecurity framework. Lastly, defense capabilities aim to establish active defenses against attacks through various protective measures.
Although threats and potential impact of risk materialisation will differ depending on the satellites’ make and mission, the space threat landscape provides a baseline for considering common challenges in the space domain, to be further tailored to the given context.
The Space Threat Landscape report recommended information sharing and reporting for timely awareness of vulnerabilities; introduction of minimum industry standards based on ‘security by design’ and ‘security by default’; and ensuring robust supply chain security as provided for by the NIS2 Directive to implement stricter controls throughout the supply chain lifecycle. It also suggests analysis and testing before introducing components into the production environment and the deployment of effective, validated, and tested encryption measures. The report is also intended to pave the way to a comprehensive cybersecurity strategy and legislation for the sector tailored to protect public interests without hindering performance and innovation.
The satellite industry can leverage existing knowledge from cybersecurity and research communities to enhance security measures. Key strategies include implementing effective cryptographic mechanisms that consider emerging technologies like quantum computing when selecting encryption protocols to reduce the risks stemming from weak configuration and address the challenge of lack of encryption. They must also establish robust segmentation to protect sensitive data to address the risk of weak configuration, preventing a breach in one area to compromise the entire satellite system and ensuring resilience against different cyber threats. They must also ensure that regular and timely patching is essential for addressing vulnerabilities in space systems.
Additionally, the ENISA Space Threat Landscape report calls for hardening systems by reducing attack surfaces. This is important for addressing the challenges related to the use of COTS, and includes disabling unnecessary services, implementing strict access controls, and configuring systems to minimise potential points of vulnerability. It also called for adopting a zero trust security model developed based on assuming a breach will address multiple risks across a satellite’s lifecycle. This implies a multi-layered approach to access control, with access granted via continuous verification of users, devices, applications, and services, and on a need-to-know basis.
Finally, organizations must promote cyber hygiene practices through awareness initiatives that will help mitigate risks associated with human error, contributing to overall resilience in the satellite ecosystem. Additionally, applicable to all stakeholders involved in the space domain, empowering the human segment of the satellite ecosystem will contribute to a reduction of risks stemming from human error.
Last September, ENISA disclosed that seven prime cybersecurity threats were identified in 2024, with threats against availability topping the chart and followed by ransomware and threats against data. Highlighting findings on the cybersecurity threat landscape during a yearlong geopolitical escalation, the report provides a relevant deep dive on each one of them by analyzing several thousand publicly reported cybersecurity incidents and events.
