Moonlight Defender: Purple Teaming in Space!
Demonstrates purple team methodologies applied to satellite ground segments and flight software to validate threat detections and improve space cyber defenses.
Summary
Applying Purple Teaming to Space Operations
As space infrastructure becomes increasingly critical for global navigation, communications, and defense, securing satellite architectures requires collaborative, iterative security testing between offensive operators and mission defenders.
Space Attack Surface and Emulation Scenarios
Ben Hawkins details purple teaming exercises targeting satellite ground segment networks, mission command servers, and simulated onboard flight software payloads, emulating realistic adversary techniques.
Validating Telemetry and Anomaly Detections
Executing controlled offensive maneuvers allows space defenders to evaluate whether satellite telemetry pipelines, ground station logs, and ground control monitoring systems correctly identify anomalous command sequences in real time.
Lessons Learned and Operational Hardening
Purple team exercises in space systems reveal critical visibility gaps, enabling mission teams to refine intrusion detection rules, implement cryptographic command verification, and harden ground-to-space communications.
Related talks
Creator Stage·26 min
Brandon Bailey
Applies offensive techniques from the SPARTA framework to generate behavioral indicators (IoBs) and design realistic intrusion detection systems for spacecraft.
Adam Pennington · Sydney Marrone · Lauren Proehl
How modern security teams transition from siloed operations to unified, intelligence-driven purple teaming.
Sarah Hume
A battle-tested assumed-compromise methodology for purple teaming that tests detection across the entire killchain.