D-Orbit and mhackeroni host groundbreaking in-orbit cybersecurity competition
In a groundbreaking move, Italian space logistics company D-Orbit, in collaboration with the Italian CTF team mhackeroni, organized Europe's first in-orbit Capture-the-Flag (CTF) cybersecurity competition. This innovative event, held in conjunction with the Security for Space Systems Conference, showcased the challenges and opportunities in satellite cybersecurity.
The competition, named CTRL+Space, took place from November 4th to 6th at the European Space Research and Technology Centre in the Netherlands. During the intense three-day finale, five elite hacker teams battled to identify and exploit vulnerabilities within D-Orbit's ION Satellite Carrier. The teams' success was measured by capturing digital 'flags' when they breached the satellite's security systems.
D-Orbit's ION Satellite Carrier is designed with robust security measures, ensuring that all activities were conducted in a secure, controlled environment, isolated from the satellite's commercial operations. This unique setup allowed for a realistic simulation of potential cybersecurity threats.
A total of 559 teams participated, with 299 completing at least one cybersecurity challenge. The top five teams, ENOFLAG, Superflat, RedRocket, CzechCyberTeam, and PoliTech, competed in the finals, with Superflat emerging as the ultimate winner. This competition highlighted the critical need for cybersecurity in the space industry.
The space environment presents unique challenges for cybersecurity, as noted by Daniele Lain, a postdoctoral researcher at the Swiss Institute of Technology in Zurich. The CTRL+Space event provided valuable insights into how conventional vulnerabilities can be adapted to the satellite domain. Antonios Atlasis, from ESA's Technology, Engineering, and Quality Directorate, emphasized the importance of this competition in addressing satellite cybersecurity challenges and demonstrating the feasibility of implementing protective measures.
Grazia Bibiano, D-Orbit's Portugal leader, underscored the growing significance of cybersecurity in the new space economy. As space missions face increasing cyber threats, companies and government agencies are turning to 'ethical' hackers to identify vulnerabilities. A notable example was the U.S. Air Force's invitation to teams at the DEF CON conference in Las Vegas to hack into a cubesat in low-Earth orbit in 2023.
This groundbreaking competition marks a significant step forward in satellite cybersecurity, fostering collaboration between industry and academia to enhance the security of space missions.
