Threat Modeling for Space Hitchhikers: CubeSats & Launch Integration
Oxford researcher James Pavur evaluates cybersecurity threats in secondary rocket payloads, modeling space-to-space radio attacks and CubeSat supply chain risks.
Summary
The Rise of Rideshare Launches and Secondary Payloads
Modern commercial rockets frequently launch dozens of secondary satellites (CubeSats) alongside primary government and commercial payloads on shared rocket stages.
Threat Modeling the 'Space Hitchhiker' Attack Surface
James Pavur explores untrusted third-party satellites co-located within deployers, analyzing risks of intentional RF jamming, thermal sabotage, or sensor blinding.
Simulating Space-to-Space Radio Exploitation
Pavur presents dynamic simulations demonstrating how a malicious CubeSat in orbit could broadcast spoofed telecommands to compromise nearby high-value satellites.
Policy and Verification Guardrails for Launch Integration
The author proposes technical isolation standards, pre-launch firmware attestation, and regulatory verification to protect rideshare space missions.
Related talks
Aerospace Village·25 min
James Pavur
Examines how malicious manipulation of centralized Space Situational Awareness collision data can mislead satellite operators.
HITCON·45 min
Presenters detail vulnerability discovery and exploitation in Adventures in Cyber Space: An introduction to satellite cybersecurity｜HITCON PEACE 2022.
Aerospace Village·16 min
Walks through building a CubeSat Simulator Lite using a Raspberry Pi and software-defined radio to transmit mock satellite telemetry.