Vulnerabilities in the space supply chain: how to protect the space ecosystem

The challenge of security in the space supply chain

The space sector is undergoing an unprecedented transformation, with an increasing number of commercial actors entering the scene. This evolution, while bringing innovation and cost reduction, is also significantly expanding the sector's attack surface. Space supply chain security has become a critical priority, with implications that go far beyond protecting individual satellites.

The evolution of the space sector

Historically, the space sector followed a linear development process, with missions commissioned by the government, designed, built, and launched over several years. However, the entry of commercial actors has radically changed this paradigm. Today, there is a greater emphasis on cost reduction, increased production, and the creation of interoperable software and hardware.

This transformation is evident in NASA's recent document, "Interoperability and Concepts of Operation Assessment for Space Relay Services and Partnerships". The technical memorandum identifies three fundamental pillars to improve interoperability in future space architectures:

• Development of standards to enable communication between space and ground systems from different organizations using common technical specifications.
• Coordination of spectrum and regulations to ensure that commercial and government operations can share increasingly congested radio frequencies without interference.
• Technological development to advance hardware and software capabilities to support interoperable communications and future mission architectures.

These pillars create a more connected and resilient space ecosystem, but they also increase the number of organizations, suppliers, and technologies that need to be trusted and protected.

The expansion of the attack surface

The expansion of the space ecosystem has led to an expansion of the threat landscape. Although attacks against satellites, such as the one against Viasat in 2022, remain important, they represent only part of a broader problem.

Software supply chains represent a significant area of vulnerability. Frequent updates and integrated software create significant concerns. Errors introduced during development, compromised code, or internal threats can affect systems long before a satellite reaches orbit.

Firmware presents another challenge. Many operational technology devices used in production factories, launch facilities, and ground stations rely on embedded systems that are often difficult to update and remain in use for years. Protecting these systems requires a different approach from traditional IT, as many of these systems cannot be disconnected for routine maintenance or replacement.

The implications of physical and digital security

These risks extend beyond individual components. For example, a compromise affecting industrial control systems or programmable logic controllers could disrupt production, alter mission operations, or degrade communications.

The challenge is that these systems cannot be viewed independently. Satellites, launch infrastructure, production facilities, ground stations, industrial control systems, and suppliers form a single ecosystem. A vulnerability in one area can have cascading effects across the entire sector.

At this point, it is clear that space supply chain security cannot be treated as a simple IT function or a procurement requirement. Mission security increasingly depends on protecting the entire ecosystem, from production facilities and suppliers to launch infrastructure, ground systems, software, and the satellites themselves.

The challenges of governance

Another relevant aspect is the lack of unified leadership in space security in the United States. Fragmented responsibilities among agencies such as the Department of Defense and the Federal Communications Committee are leaving the sector vulnerable. The industry is calling for stronger governance to provide more effective leadership, better public-private coordination, and a unified approach to securing space systems.

As the space sector continues to grow, supply chain resilience is proving to be as important as the development and launch of new technologies. Space supply chain security requires a holistic and coordinated approach that takes into account the complexities and interdependencies of the modern space ecosystem.