{"id":2141,"date":"2023-05-10T21:57:45","date_gmt":"2023-05-10T19:57:45","guid":{"rendered":"https:\/\/www.spacesecurity.info\/hacking-demo-at-cysat-2023-world-first-or-deja-vu%e2%9d%93-here-is-what-i-know-%f0%9f%91%87\/"},"modified":"2023-05-22T22:34:10","modified_gmt":"2023-05-22T20:34:10","slug":"hacking-demo-at-cysat-2023-world-first-or-deja-vu%e2%9d%93-here-is-what-i-know-%f0%9f%91%87","status":"publish","type":"post","link":"https:\/\/www.spacesecurity.info\/en\/hacking-demo-at-cysat-2023-world-first-or-deja-vu%e2%9d%93-here-is-what-i-know-%f0%9f%91%87\/","title":{"rendered":"Hacking\u00a0demo at\u00a0CYSAT\u00a02023: world first or “d\u00e9j\u00e0 vu”\u2753 Here is what I know \ud83d\udc47"},"content":{"rendered":"

CYSAT<\/a>\u00a02023 is over. It\u2019s time to review everything that has happened during this amazing event.\u00a0But first, let\u2019s remember what CYSAT is.<\/p>\n

CYSAT is the leading European cybersecurity and space exhibition that took place 26th-27th April in Paris (Station F). This is the biggest European event entirely focused on cybersecurity for the space industry.<\/p>\n

\"\"<\/a><\/p>\n

Since 2021, the event brings space and cybersecurity experts together to create a European ecosystem capable of responding to the current and future challenges faced by the European space industry.<\/p>\n

Faced with cybersecurity challenges and the growing importance of data protection in space, it is crucial to bring together communities of cybersecurity experts to build a European ecosystem capable of addressing current and future industry challenges.<\/p>\n

Last years\u2019 event saw more than 450 space specialists, decision-makers and experts come together. In its third year, CYSAT highlighted Europe\u2019s cybersecurity capabilities and solutions dedicated to space from both a technological and geostrategic perspective.<\/p>\n

To find the full programme and more information on the event, visit:\u00a0https:\/\/cysat.eu\/<\/a><\/p>\n

Mathieu Bailly, VP at\u00a0CYSEC<\/a>, Co-founder and Director of\u00a0CYSAT<\/a>, has published on his linkedin profile about the\u00a0Hacking demo at CYSAT 2023: world first or “d\u00e9j\u00e0 vu”\u2753 Here is what he knows \ud83d\udc47<\/p>\n

We publish these key takeaways below with his permission.\u00a0Thank\u2019s to Mathieu for sharing whith us its key takeaways.<\/p>\n

\"\"<\/a>
Mathieu Bailly, VP Space chez CYSEC et Directeur de CYSAT<\/figcaption><\/figure>\n

#Hacking\u00a0demo at\u00a0CYSAT\u00a02023: world first or “d\u00e9j\u00e0 vu”\u2753Here is what I know \ud83d\udc47<\/p>\n

The exact claim is first “ethical hacking demonstration performed on a flying satellite” \ud83c\udfc5<\/p>\n

\u26a0\ufe0f Every word counts!<\/p>\n

1\ufe0f\u20e3 in the real world<\/strong><\/p>\n

Since satellites have been used for intelligence and military communications oh boy they’ve suffered many cyber attacks. Some have been successful, many haven’t.<\/p>\n

I’d say most of the “attacks” publicly disclosed have not actually managed to disturb the nominal operations of the space segment
\nExamples include the Luch-Olympe fly-by, the Viasat attack (the Ka-sat satellite is still working perfectly fine!), all the jamming \/ spoofing attacks in the black Sea or Iran, etc etc<\/p>\n

For the very few which seem to be related to the space segment I’d be very careful as most of the time the actual facts remain scarce and hard to prove (example: ROSAT story in 1998)<\/p>\n

\"\"<\/a><\/p>\n

2\ufe0f\u20e3 Security research<\/strong><\/p>\n

Some researchers did some really interesting stuff to point out the vulnerabilities of space systems but to my best knowledge never actually went all the way<\/p>\n

I’m thinking about\u00a0James Pavur<\/a>\u00a0for example that was among the pioneers in space security. He made a big splash by showing he was able to\u00a0#eavesdrop\u00a0quite easily on sensitive data transmitted by satellite \ud83d\udce1 but never performed an experiment on the satellite itself.<\/p>\n

3\ufe0f\u20e3 Ethical hacking<\/strong><\/p>\n

In terms of ethical hacking the number one reference is the US Air Force competition Hack-a-sat<\/a>.
\n\ud83d\udcac “it’s been done already in Hack-a-sat” is the number one comment I’ve read below the\u00a0CYSAT\u00a0articles.
\nWell, no. Not yet exactly.
\nHack-a-sat 1, 2 and 3 were done on the ground. On flatsats. Nothing was flying in orbit. Check out the testimonials of European hackers at CYSAT 2021 and 2022.
\nHowever it is true that hackers will get the chance to hack “Moonlighter”, a flying 3U cubesat during Hack-a-sat 4 later this year \ud83d\udc7e<\/p>\n

4\ufe0f\u20e3 Hack CYSAT 2022<\/strong><\/p>\n

There is also a bit of confusion regarding of what happened last year.
\nWe had this idea of hacking a flying satellite back in the summer 2021 with\u00a0CYSEC\u00a0CEO and CYSAT co-founder\u00a0Patrick Trinkler<\/a>.
\nIt took us a while to find a satellite operator that was okay to let hackers play with it
\nFinally I heard of OPS-SAT which I thought would be the ideal spacecraft to do a security demo.<\/p>\n

Then it took\u00a0David Evans<\/a>\u00a0and I some time to build the case to ESA’s management.
\nFinally in February 2022 we published the Hack CYSAT open call to invite hackers to submit their ideas, among them\u00a0Didelot Maurice-Michel<\/a>\u00a0that blogged about a vulnerability he spotted and told ESA to fix it, which ESA did. But nothing was done on the \ud83d\udef0\ufe0f<\/p>\n

\"\"<\/a><\/p>\n

5\ufe0f\u20e3 random articles<\/strong><\/p>\n

Various articles out there are mixing the words “satellite” and “hacking”, like the guys that “hijacked” a satellite to play a movie, etc etc. None of them did what we claim the\u00a0Thales\u00a0team did at CYSAT.<\/p>\n

\ud83d\udc49 So to me it looks like it had never been done before but maybe I’m wrong!<\/p>\n

\ud83d\udc47 PLEASE comment below if you have other references!<\/p>\n

Check this demo in video<\/b><\/p>\n