Satellite and space communication systems securitySyllabus

Subject code

MS-1414-EN

Credits

6

Student workload

135

Semester

Autumn semester

Academic year

2

Subject type

Elective

Form of education

Full-time

Language of instruction

Azerbaijani

In-class hours

Lectures — 30 hours; practical sessions — 15 hours

Out-of-class hours

TSİ— 70 hours; MRTSİ — 65 hours

This course focuses on the cybersecurity principles, architectures, technologies, and emerging threats associated with satellite and space communication systems. it examines the architecture of space communication infrastructure, including ground, space, and user segments, as well as security challenges related to satellite communication links, navigation systems, and command and control infrastructure. the course covers jamming and spoofing attacks, signal interception, denial-of-service attacks, cryptographic protocols, key management, secure data transmission, and CCSDS security standards. particular attention is given to anti-jamming defense mechanisms, GNSS signal authentication, quantum key distribution (qkd), cubesat and mega-constellation security, and cyber-physical risks in the orbital environment. students explore the application of artificial intelligence and machine learning to anomaly detection and intrusion detection, using tools such as sdr, matlab, and python for modeling, analysis, and visualization. through case studies of real-world incidents, including the viasat ka-sat attack, students develop skills in threat modeling, risk assessment, security analysis, and the design of resilient space communication systems. the course also emphasizes ethical research practices, legal considerations, and international standards relevant to space cybersecurity.

• lecture
• interactive discussion
• problem-based learning
• teamwork
• project-based learning
• presentations

1. 1

   CLO 1: Describe the architecture of space communication systems, including the ground, space, and user segments, and classify threats targeting these systems, such as jamming, spoofing, signal interception, and denial-of-service (dos) attacks.

2. 2

   CLO 2: Formulate research questions concerning vulnerabilities in satellite communication links, develop threat models, and select and justify appropriate risk assessment methodologies, such as STRIDE and dread.

3. 3

   CLO 3: Explain the operating principles of cryptographic protocols, including key exchange and encryption algorithms, as well as international standards such as ccsds; apply and comparatively analyze these mechanisms in resource-constrained space environments.

4. 4

   CLO 4: Model attack scenarios targeting satellite communication systems, including spoofing, jamming, and intrusion, using software tools such as software-defined radio (sdr), matlab, and python; process the resulting data using statistical methods and present the findings in graphical and visual formats

5. 5

   CLO 5: Apply machine learning methods to develop anomaly detection and intrusion detection systems (ids), and evaluate model performance using appropriate metrics, including accuracy, precision, recall, and f1-score.

6. 6

   CLO 6: Conduct technical and analytical investigations of real-world incidents, including the viasat ka-sat attack and other industry cases; organize findings into structured scientific reports, research papers, or projects, and present them to an audience in written and oral formats.

7. 7

   CLO 7: Conduct independent or collaborative research in space cybersecurity while complying with ethical and legal principles and methodological standards; prepare research projects or dissertations while observing safety requirements, such as transmitting radio-frequency signals only in closed or shielded environments and never conducting GNSS spoofing tests over the open air.

1. 1.
   Jamming attacks in electronic warfare and anti-jamming defense architecturesLecture

   This topic examines radio-frequency jamming attacks targeting communication and navigation systems in electronic warfare environments, including their operating principles and effects. frequency-hopping spread spectrum (fhss) and direct-sequence spread spectrum (dsss) technologies are comparatively analyzed in terms of their resistance to interference. the topic also explores the application of adaptive antenna systems, beam steering mechanisms, and signal processing techniques in anti-jamming defense.

2. 2.
   Spoofing attacks against gnss/gps navigation systems and signal authentication mechanismsLecture

   This topic analyzes the nature, types, and potential consequences of spoofing attacks against gnss/gps navigation systems, which involve the generation and transmission of counterfeit signals. methods for verifying navigation data authenticity, cryptographic signal authentication, and spoofing detection are studied. the operating principles of authentication mechanisms such as galileo OSNMA are examined, along with the evaluation of spoofing detection algorithms based on signal strength, timing, movement trajectories, and other indicators.

3. 3.
   Cryptographic infrastructure in space communications: key management and protocol designLecture

   This topic covers the design of cryptographic infrastructure that ensures the confidentiality, integrity, and authenticity of data in space communication systems. it examines the use of symmetric and asymmetric cryptographic systems, as well as mechanisms for generating, distributing, storing, updating, and revoking cryptographic keys. students develop knowledge and skills in selecting lightweight cryptographic algorithms for spacecraft with limited computing and power resources, designing secure protocols, and evaluating their resilience.

4. 4.
   Designing secure data transmission protocols between ground and space segmentsLecture

   This topic addresses the principles of designing protocols that ensure secure data exchange between ground control centers and spacecraft or satellites. security requirements for telemetry, tracking, and command (tt&c) channels are studied, including data integrity, source authenticity, and confidentiality. the topic analyzes the establishment of secure communication sessions, message authentication, prevention of replay attacks, and the design of mechanisms resilient to communication interruptions.

5. 5.
   Security requirements for space data systems under CCSDS international standardsLecture

   This topic examines the standards of the consultative committee for space data systems (ccsds) and their role in securing space communication systems. security requirements for transmitting space data are explored, including authentication, integrity, confidentiality, and protection against replay attacks. the architecture, functional capabilities, limitations, and implementation prospects of the space data link security (sdls) protocol are critically analyzed. the adaptation of these standards to different space systems is also considered.

6. 6.
   Cyber-physical protection of satellite command and control infrastructureLecture

   This topic covers the principles of protecting satellite command and control infrastructure against cyber and physical threats. mechanisms for preventing unauthorized access, implementing multi-factor authentication, managing access privileges, and verifying the authenticity of control commands are studied. the topic analyzes vulnerabilities in onboard satellite software, secure software updates, the integration of physical and digital protection measures, and methods for preventing compromised control and limiting its consequences.

7. 7.
   Ensuring satellite network resilience against denial-of-service (dos/ddos) attacksLecture

   This topic examines the characteristics of denial-of-service (dos) and distributed denial-of-service (ddos) attacks targeting satellite communication networks and ground control infrastructure. risks associated with resource exhaustion, communication channel overload, and service unavailability are analyzed. network resilience and recovery models, traffic filtering, backup communication channels, dynamic resource allocation, and emergency recovery strategies are studied.

8. 8.
   Satellite-based quantum key distribution (qkd): prospects and limitationsLecture

   This topic covers the principles and security capabilities of quantum key distribution (qkd) in satellite-to-ground communication systems. the transmission of quantum states, key generation and distribution, and mechanisms for detecting interference in quantum communication channels are studied. satellite-to-ground QKD experiments, atmospheric effects, optical signal losses, equipment requirements, and operational costs are analyzed. the potential benefits and practical limitations of using quantum communications in large-scale space networks are evaluated.

9. 9.
   Specific security challenges of cubesat and mega-constellation systems (starlink, oneweb, kuiper)Lecture

   This topic examines the security characteristics of cubesat-class small satellites and mega-constellations consisting of numerous satellites, such as starlink, oneweb, and kuiper. methods for ensuring cryptographic protection, authentication, and software security under limited computing power, energy, and memory constraints are studied. the topic analyzes the protection of inter-satellite communication links, attack surfaces arising from network expansion, risks associated with centralized and distributed control, and the optimization of security measures.

10. 10.
    Physical security in the orbital environment: space debris, maneuvering hazards, and cyber-physical risk interactionsLecture

    This topic explores the relationship between the physical safety of spacecraft in orbit and the cybersecurity of their digital control systems. collision risks caused by space debris, the safe planning of orbital maneuvers, and the monitoring of space objects are studied. the physical consequences of cyber incidents, such as compromised control systems, falsified navigation data, and unauthorized commands, are examined. particular attention is given to cyber-physical risk assessment and the development of integrated defense measures.

11. 11.
    Applying artificial intelligence and machine learning to anomaly detectionLecture

    This topic covers the application of artificial intelligence and machine learning methods to detect abnormal behavior in satellite telemetry and space communication networks. the principles of supervised and unsupervised learning, anomaly classification, time-series analysis, and behavior-based intrusion detection systems (ids) are studied. the topic examines modeling normal system behavior, identifying suspicious activities, reducing false positives, and evaluating models in terms of detection accuracy, latency, and computational resource requirements.

12. 12.
    International legal and geopolitical regulation of cyberwarfare in spaceLecture

    This topic examines cyberattacks against space systems in the context of international law, interstate relations, and global security. international treaties governing space activities, principles adopted within the united nations framework, state responsibility, and legal issues concerning the civilian and military use of space infrastructure are studied. the attribution of cyber incidents, potential state responses, risks of conflict escalation, and norms for the responsible use of outer space are analyzed. particular attention is given to ethical principles, legal accountability, and international cooperation in research activities.

13. 13.
    Comparative analysis of industry incidents: the viasat ka-sat attack (2022) and other casesLecture

    This topic provides a comparative analysis of the 2022 cyberattack against the viasat ka-sat satellite communication network and other real-world incidents affecting space communication infrastructure. initial access methods, exploited vulnerabilities, affected systems, and the impact on service availability are examined. the causes and consequences of these incidents, the effectiveness of defense measures, and lessons learned are evaluated. based on the findings, strategies are developed to reduce risks, strengthen redundancy and recovery mechanisms, and implement proactive security measures to prevent future attacks.

1. Pavur, j., & martinovic, i. (2022). building a launchpad for satellite cyber-security research: lessons from 60 years of spaceflight. journal of cybersecurity, 8(1), tyac008.
2. Oakley, j. g. (2020). cybersecurity for space: protecting the final frontier. apress.
3. Cyber security for space missions: mitigating risks in the new space era (2025). wiley. ISBN 978-1-394-37027-6.
4. Maral, g., bousquet, m., & sun, z. (2020). satellite communications systems: systems, techniques and technology (6th ed.). wiley.
5. Housen-couriel, d. (2016). cybersecurity threats to satellite communications: towards a typology of state actor responses. acta astronautica, 128, 409–415.
6. Falco, g., & boschetti, n. (2021). a security risk taxonomy for commercial space missions. ASCEND 2021, aiaa.
7. Salim, s., moustafa, n., & reisslein, m. (2025). cybersecurity of satellite communications systems: a comprehensive survey of the space, ground, and links segments. IEEE communications surveys & tutorials, 27(1), 372–425.