Offensive Security Testing: Safeguarding the Final Frontier
Details offensive security assessments of open-source space mission control systems NASA OpenMCT and YaMCS to uncover chained exploit paths.
Summary
Evolution of Space Mission Control Systems
Mission Control Systems (MCS) serve as the primary ground interface for monitoring and commanding space assets. Modern architectures have shifted from isolated control rooms to networked and remotely accessible deployments, exposing mission software to conventional cyber threats.
Security Posture in Space Software Development
Despite adopting modern technology stacks, space software development frequently defers security considerations to late lifecycle stages. Established open-source mission control systems often harbor fundamental vulnerabilities that can jeopardize operational spacecraft.
Vulnerability Analysis in OpenMCT and YaMCS
Security evaluations of NASA OpenMCT and Yamcs identified multiple exploitable vulnerabilities. When chained together, these weaknesses enable unauthorized ground-segment access and compromise command pipelines regulating active space missions.
Integrating Offensive Security Testing
Proactively embedding offensive security testing into the space software development lifecycle is essential. Rigorous adversarial assessments identify architectural weaknesses before mission systems deploy into operational ground stations.
Related talks
Creator Stage·25 min
Tim Fowler
Explores the emerging discipline of space red teaming, applying offensive testing methods to satellites, ground stations, and mission control infrastructure.
Creator Stage·25 min
Andrzej Olchawa
Analyzes security vulnerabilities in the Space Link Extension protocol used by NASA and ESA, demonstrating ground station traffic interception.
Briefings·36 min
Lance Cain · Daniel Mayer
Security researchers demonstrate post-exploitation techniques abusing Jamf Pro device management workflows for enterprise persistence and privilege escalation.