Future-proofing Cybersecurity of Commercial Space-based Infrastructure: A New Framework for Resilience

Space assets are critical to modern society, underpinning everything from global communications to navigation and defence. This thesis proposes a new framework for future-proofing these assets' cyber resilience against current and emerging cyber threats. It addresses the inherently multidisciplinary nature of space systems cybersecurity and resilience, examining four key areas: cyber resilience, outer space assets protection, systems engineering, and space law. The research highlights the unique threat landscape faced by space systems, which are increasingly complex Cyber-Physical Systems (CPS) with tightly integrated hardware and software components, making them susceptible to cyber, electronic, and kinetic attacks. To gain practical insights into these challenges, space designers were interviewed, providing first-hand perspectives on the difficulties they face in ensuring the resilience of space infrastructure. Their input was crucial in evaluating the current legal and cybersecurity frameworks, standards, and regulations for the space sector. The findings revealed significant inadequacies in addressing the challenges posed by the lack of international and domestic frameworks tailored for orbital and extraterrestrial environments. This gap necessitates a comprehensive approach that integrates legal and engineering solutions specific to the needs of the space domain. This thesis explores the legal challenges in implementing cybersecurity and resilience standards within existing space law frameworks, focusing on jurisdiction, liability, and enforcement. Furthermore, it delves into the legal frameworks or international agreements required to establish enforceable protocols for safeguarding critical space infrastructure from cyber and physical threats, ensuring compliance across different jurisdictions. From a systems engineering perspective, the thesis examines methodologies to design, assess, and enhance the resilience of outer space assets against cyber and kinetic threats throughout their lifecycle. It identifies critical nodes in space systems and proposes systems engineering approaches integrated with cybersecurity practices to mitigate vulnerabilities from design to operational phases. The final proposed solution is a multidisciplinary framework that aligns with the engineering lifecycle to incorporate cyber resilience decisions at the early design stages of space-based infrastructure. This framework, tailored for space designers, provides a comprehensive approach to ensure resilience against the evolving threat landscape, ultimately safeguarding space assets and protecting the global infrastructure they support.

Grantor dc:publisher

UNSW, Sydney

Year dc:date

2025

Author dc:creator

• Shahzad, Syed ; https://orcid.org/0000-0002-5741-4373

• Cybersecurity
• Cyber Resilience
• Space Infrastructure
• Space Systems Engineering
• Cyber Resilience Framework
• Space Systems Design
• Systems Engineering
• Defence
• Cyber Security
• anzsrc-for: 400107 Satellite, space vehicle and missile design and testing
• anzsrc-for: 4604 Cybersecurity and privacy

Statement dc:rights

• embargoed access
• CC BY 4.0

Licence

• http://purl.org/coar/access_right/c_f1cf
• https://creativecommons.org/licenses/by/4.0/

Language dc:language

en

Identifier

https://doi.org/10.26190/unsworks/31024

OAI identifier oai:identifier

oai:unsworks.library.unsw.edu.au:1959.4/104616