Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: McAmis, Rachel, Haas, Gregor, Sim, Mattea, Kohlbrenner, David, Kohno, Tadayoshi
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866913836435505152
author McAmis, Rachel
Haas, Gregor
Sim, Mattea
Kohlbrenner, David
Kohno, Tadayoshi
author_facet McAmis, Rachel
Haas, Gregor
Sim, Mattea
Kohlbrenner, David
Kohno, Tadayoshi
contents Satellites face a multitude of security risks that set them apart from hardware on Earth. Small satellites may face additional challenges, as they are often developed on a budget and by amateur organizations or universities that do not consider security. We explore the security practices and preferences of small satellite teams, particularly university satellite teams, to understand what barriers exist to building satellites securely. We interviewed 8 university satellite club leaders across 4 clubs in the U.S. and perform a code audit of 3 of these clubs' code repositories. We find that security practices vary widely across teams, but all teams studied had vulnerabilities available to an unprivileged, ground-based attacker. Participants foresee many risks of unsecured small satellites and indicate security shortcomings in industry and government. Lastly, we identify a set of considerations for how to build future small satellites securely, in amateur organizations and beyond.
format Preprint
id arxiv_https___arxiv_org_abs_2505_09038
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code
McAmis, Rachel
Haas, Gregor
Sim, Mattea
Kohlbrenner, David
Kohno, Tadayoshi
Cryptography and Security
Satellites face a multitude of security risks that set them apart from hardware on Earth. Small satellites may face additional challenges, as they are often developed on a budget and by amateur organizations or universities that do not consider security. We explore the security practices and preferences of small satellite teams, particularly university satellite teams, to understand what barriers exist to building satellites securely. We interviewed 8 university satellite club leaders across 4 clubs in the U.S. and perform a code audit of 3 of these clubs' code repositories. We find that security practices vary widely across teams, but all teams studied had vulnerabilities available to an unprivileged, ground-based attacker. Participants foresee many risks of unsecured small satellites and indicate security shortcomings in industry and government. Lastly, we identify a set of considerations for how to build future small satellites securely, in amateur organizations and beyond.
title Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code
topic Cryptography and Security
url https://arxiv.org/abs/2505.09038