As space technology advances, cybersecurity must keep pace. The increasing complexity of satellite networks and space-based communications presents both new opportunities and risks. Mattias Wallén, Chief Information Security Officer (CISO) at SSC, highlights key emerging trends that are shaping the future of space cybersecurity.
Space is quickly becoming an extension of the internet, with some satellites now being directly reachable from the internet. This opens the door to cyber threats like unauthorized access, rogue ground stations, and ransomware attacks on space assets. “Attackers could start scanning for internet-connected satellites or even set up rogue ground stations to exploit vulnerabilities,” Wallén explains.
Mega Constellations and Cloudification Create Challenges
The rise of mega constellations—large fleets of interconnected satellites—raises new cybersecurity challenges. These networks require standardized communication protocols, but traditional trust models based on physical location do not apply. “In space, trust cannot be established the same way we do with terrestrial systems,” Wallén explains. “We need new frameworks to ensure security across diverse, interoperable satellite networks.”
Cloudification of space, where startups are offering rentable satellite payloads or even planning on deploying datacenters in space, means customers can upload and run their own code on satellites, or run some of their computations on their data on servers in space much like cloud computing. “This is an exciting development, but it also means we need strict security measures to prevent malicious code from being executed in space,” Wallén continues.
AI-Driven Cyber Defense
AI-driven autonomous cyber defense is emerging as a critical security measure. Satellites in orbital mesh networks can now share data and dynamically adjust their defenses on the fly. “We are seeing a shift towards self-healing constellations—where satellites can detect and neutralize threats autonomously and also share these to neighboring satellites that they trust. This could be a game-changer in mitigating cyberattacks in space and is the only way to respond fast enough to cyberattacks” Wallén notes.
Optical Connectivity
One of the most significant advancements is the development of optical inter-satellite links and space-to-ground links to optical ground stations, which will enable seamless, always-on communication between ground and space vehicles with very high data throughput capabilities. This constant connectivity enhances operational efficiency but also increases the attack surface. “With satellites continuously connected, we must rethink how we secure data transmission, and protect against cyber threats in real time,” Wallén explains.
Quantum Security and Deep Space Risks
Securing space communications will likely need to be done using post-quantum cryptography (PQC), that is secure encryption algorithms that cannot be broken by a functioning quantum computer. Even the emerging research area of quantum key distribution (QKD) may be needed to protect sensitive communications like encryption keys. It is also likely that we will need to be able to update the encryption algorithms the satellite uses during its lifespan, this will require secure protocols for changing crypto algorithms.
Deep space
However, deep-space networks needed for building and maintaining space stations on the Moon and Mars introduce additional challenges. “Zero Trust security models become incredibly difficult when dealing with deep space, where latency and distance complicate real-time verification,” Wallén explains. He also warns of the risks of local malicious or unintentional jamming that might be hard to detect on earth and could lead to communication failures and key verification failing.
As public key infrastructure (PKI) is extended to deep space missions, securing cryptographic keys and handling the certificate revocation list (CRL) becomes crucial. “Fail-open scenarios could have serious consequences in deep space. We need robust mechanisms for limited fail-open and retroactive key revocation if we loose communications or they take too long time,” Wallén suggests.
Policy and Industry Collaboration
To tackle these challenges, EU space policy must work closely with research institutions and industry leaders. Wallén stresses that collaboration is essential: “Cybersecurity in space is not just a technical challenge; it’s a policy and governance issue. We need a joint effort between governments, industry, and academia to establish security standards for the space age.”
The rapid evolution of space technology demands an equally fast response from cybersecurity experts. As satellites become more interconnected and autonomous, the industry must adapt to new threats while ensuring the resilience of space infrastructure. Wallén concludes, “We are entering a new era where cybersecurity is as important in orbit as it is on Earth.”
Space security is a present-day necessity.
