Expert Voices

NASA science mission spacecraft are at risk from hackers, but a new law could help protect them

satellite dish with numbers from computer code behind it.
Space missions are at risk from hackers. (Image credit: Anton Petrus via Getty Images)

NASA missions are some of the most technologically advanced and critically important endeavours. From the Mars Rover explorations to the Artemis missions to the moon, the space agency's projects push the boundaries of science and technology. However, these missions are also prime targets for cyber-attacks.

In a bold move to counter the escalating threat of these attacks, U.S. congressmen Maxwell Alejandro Frost and Don Beyer have proposed the Spacecraft Cybersecurity Act. If passed, the legislation would mandate NASA to overhaul the way it procures and builds its spacecraft.

It would have to incorporate rigorous cybersecurity measures from the very start of the design and development process in an effort to protect them against attack.

Securing these sensitive missions against potentially catastrophic failures becomes even more urgent amid rising geopolitical tensions.

A recent Government Accountability Office (GAO) report exposed alarming vulnerabilities in NASA's current cybersecurity practices. The report highlighted that while the space agency has cybersecurity requirements for spacecraft once they are operational, it lacks mandatory guidelines for embedding such protections in the design of spacecraft during acquisition and development.

NASA's Perseverance rover on the surface of Mars.  (Image credit: NASA/JPL-Caltech/MSSS)

High stakes

A successful breach could have devastating consequences, including mission failure, data theft and national security risks. For example, a compromised communication system could render a spacecraft uncontrollable, ending its mission prematurely. Nasa missions also generate vast amounts of valuable scientific data.

The theft of this sensitive information would potentially give adversaries access to advanced research and technology. The stakes are high: the loss of control over a spacecraft could lead to collisions or other catastrophic failures, jeopardising not just the mission but other assets in space. Attacks could even affect spacecraft carrying humans, such as NASA's Orion capsule which is designed to take astronauts to the moon under the Artemis Program.

An artist's illustration of NASA's Orion crew capsule heading to the moon. (Image credit: NASA)

Globally, the importance of cybersecurity in space operations is increasingly being recognised. The European Union has launched cybersecurity initiatives such as the EU Space Program and the IRIS² project that boosts satellite-based connectivity.

France's Law on Space Operations and the UK's Space Industry Act 2018 both include cybersecurity provisions. The much-awaited EU Space Law is also widely expected to incorporate protections against cyber-attacks. These efforts underscore the necessity of international cooperation and standardisation in addressing cyber-attacks in space.

Addressing the challenges

If the US Spacecraft Cybersecurity Act does pass — and timings aren't confirmed as it was only introduced to the House of Representatives on July 9 this year — its unique focus on spacecraft will allow for the development of precise, effective cybersecurity measures tailored to specific projects. The proposed act requires NASA to update its acquisition policies within 270 days, ensuring timely and effective integration of these essential protections from the initial stages of spacecraft development.

However, NASA has also faced criticism for its delayed response to cybersecurity threats. Despite being aware of these issues since 2019, the agency cited a lack of time for not implementing necessary changes.

One significant challenge is the burden on smaller operators and contractors. The legislation must provide support and guidance to help these companies comply with cybersecurity requirements without stifling innovation. This support could include financial incentives, technical assistance, and a phased implementation approach to allow smaller companies time to adapt to new standards.

Continuous monitoring of spacecraft systems and periodic updates to address emerging threats may all be vital components of the act. The dynamic nature of the threats will require a proactive approach to cybersecurity. If the US Act is passed, NASA is likely to be tasked with implementing regular reviews and updates of its cybersecurity policies and protocols.

The US Spacecraft Cybersecurity Act represents a pivotal step in securing space missions against cyber threats. While the cybersecurity frameworks in France and the UK are still in their early stages and untested, they underscore the increasing recognition of a need for robust cybersecurity measures for space operations.

Swift implementation and uniform standards may protect NASA's missions and set a global benchmark for spacecraft cybersecurity, enhancing the security of space exploration for all.

Join our Space Forums to keep talking space on the latest missions, night sky and more! And if you have a news tip, correction or comment, let us know at: community@space.com.

Sharon Lemac-Vincere
Senior Teaching Fellow in Space and Cyber, Hunter Centre For Entrepreneurship, University of Strathclyde

I am an interdisciplinary academic in the Hunter Centre for Entrepreneurship and a visiting academic at the International Space University in Strasbourg. I work at the intersection of the dual domains of space and cyber, I bring a blend of expertise in entrepreneurship, space technology, cybersecurity, simulation, and legal knowledge. With an understanding of the complex challenges faced by the space industry, I seek to leverage my interdisciplinary background to create transformative learning experiences that bridge the gap between theory and practice.

Through my lectures and immersive storytelling, I aim to inspire students and professionals to embrace the dynamic intersection of space entrepreneurship, emerging technology and cybersecurity resilience. By infusing my teaching with practical insights and a focus on ethical decision-making. I seek to empower my students to become purposeful and visionary leaders who can navigate the ever evolving complex landscape in emerging sectors and economies.

I am committed to fostering a collaborative and inclusive learning environment that nurtures creativity, critical thinking, innovation, entrepreneurship, and legal knowledge. I believe in the power of interdisciplinary education and strive to cultivate meaningful connections, with my students, guiding them to unlock their full potential and pursue their passions. Fundamentally my work is shaped by a desire to shape a secure entrepreneurially thriving, innovative and legally compliant space industry.