Italian company Leaf Space, a provider of ground-segment services for smallsats, made a partnership agreement with CYSEC, a Swiss cybersecurity company, to offer end-to-end cyber security protection for satellite communications. Cybersecurity has not been historically a priority for space engineers, who normally focus on maximizing the available mass on board rather than adding extra security features.
Today the situation is changing, as small satellites are capable of collecting very sensitive and valuable data. This raises numerous questions on the resilience of the ground and space infrastructure against cyber attacks. CYSEC will offer smallsat operators an off-the-shelf solution, protecting their infrastructure and data against cyber risks. Initially supported by the ESA Business Incubation program to research the gap in the market and develop dedicated solutions, CYSEC is releasing a product portfolio for both ground and space security protection for satellite communications.
Jonata Puglia, CEO of Leaf Space comments, “Cybersecurity is now a major concern for certain Newspace actors and will become always more relevant in the near future in our industry. As a provider of ground infrastructure we want our customers to benefit from the best level of protection available today. CYSEC is the first to propose pragmatic solutions to this issue. ”
Because of the complexity of satellite architectures, there are many possible entry points for a hacker from which to eavesdrop, tamper with information, cause a service interruption or even worse take control of the satellites. However a few simple steps can efficiently discourage criminals as Mathieu Bailly, VP Space at CYSEC explains, “Our goal is to offer operators accessible tools that show the best compromise between the level of protection and the impact on the satellite design and operations. With the help of Leaf Space, we can now easily secure all ground operations using our ARCA platform”
ARCA, CYSEC’s flagship product consists of a secured backend infrastructure that can run critical software and store sensitive data. Its main advantage is the simplicity of its integration as it is compatible with modern virtualization tools that software developers use today such as Docker, Kubernetes, VMWare, etc while using state-of-the-art certified hardware.
The collaboration between CYSEC and Leaf Space offers end-to-end protection from the ground station network to the mission control software hosted by the satellite operator. Giovanni Pandolfi, Leaf Space CTO adds, “ARCA truly makes cyber security finally accessible for smallsat operators without even having to change their current habits. Combining the Leaf Space network engine with the mission control software in the ARCA trusted execution environment is a game-changer in terms of cyber resilience.”
The two partners will extend their collaboration by offering smallsat operators and manufacturers the possibility of adding a dedicated root of trust on board the satellites. Mathieu Bailly says “In addition to the ground segment, we want to stress the importance of having a root of trust on board the satellite to prevent any attack prior to launch. We designed our ARCASpace product line to secure the minimum amount of information required to trust all operations performed on board.”
Alexandre Karlov, CYSEC CTO adds, “We understood very quickly that in the smallsat market there is no cybersecurity culture yet. In particular about the generation, storage, management and handling of the cryptographic secrets that will be used on board the satellite during the mission, for example to encrypt the payload data collected in space. If these secrets are compromised then the entire mission is at risk.”
The two partners are in advanced discussions with several operators to implement a common security architecture on the ground. This will combine the Leaf Space network of ground stations and the mission control software in ARCA.
For more information, please visit www.leaf.space, or www.cysec.com.
