Analyzing the Security of Satellite-Based Internet Services

Abstract

The introduction of satellite-based Internet services has already become an important part of the global connection, making it possible to obtain broadband in remote, rural, maritime, and after-disaster areas. New implementations of the large-scale low Earth orbit (LEO) constellation, as well as traditional medium Earth orbit (MEO) and geostationary Earth orbit (GEO) systems, have created much better coverage, capacity, and latency performance. Nevertheless, the peculiarities of satellite networks imply different security threats, which cannot be considered as the same ones as those of the Internet infrastructures on the ground. The paper reviews the security of satellite-based Internet services in terms of the architectural components and communication protocols, and operational restrictions. An in-depth threat model has been provided, including passive and active opponents in space, on the ground, and in the user segments. The major security issues are mentioned as being long distance wireless connections, high propagation delays, lack of sufficient on-board computational capabilities, and the extremely dynamic topology due to the movement of satellites. The paper also analyses the currently available cryptographic and authentication solutions applicable in satellite setups with particular focus on lightweight encryption, scalable key management, and strong access control protocols. This work by methodically studying the weaknesses and countermeasures indicates gaps in existing security designs and the differentiation of the adaptive, resource-conscious, and resilient security designs to suit the next generation satellite Internet systems. The results are to benefit the creation of secure satellite networking solutions that can provide reliable global connections.