Space Cyber: An Aerospace Perspective

Space Cyber: An Aerospace Perspective USAF Cyber Vision 2025 AFSPC 19-21 March 2012 Frank Belz and Joe Betser The Aerospace Corporation Computers and Software Division 20 March 2012 frank.belz@aero.org betser@aero.org 310.336.1328 310.227.3863 The Aerospace Corporation 2012

Cybersecurity: Evolving to Cyberspace Operations Cyber physical systems are ubiquitous and increasingly complex Defensive focus is shifting from resistance to resilience 2

Information Assurance Is Necessary for Cyber Operations But not Sufficient Information Assurance engineering discipline is adding resilience to its ongoing emphasis on resistance and reconstitution 3

Mission Success for National Security Space The Aerospace Corporation (Aerospace) s Space Cyber Responsibility Aerospace responsibilities extend across all segments of National Security Space missions, and to their net-centric interconnectivity 4

Vision for Aerospace in Cyber & Information Assurance Aerospace is recognized as the advisor of choice for acquiring and fielding National Security Space (NSS) systems and services that can operate through Cyber degradation or attack Aerospace earns that recognition by Treating Cyber & IA as a critical element for achieving mission success through diligent applications of mission assurance Understanding, prioritizing, and mitigating Cyber vulnerabilities for NSS Leveraging the unique breadth and depth of insight across the NSS lifecycle to include Cyber & IA in our mission assurance role Utilizing Aerospace strengths, and also working/partnering with other FFRDCs 5

Cyber & IA Strategy Enhances Mission Assurance Now Increasing Cyber knowledge and influence Future Cyber & IA Vision Cyber & IA a critical element for Mission Success Understanding NSS Cyber & IA vulnerabilities Aerospace Core NSS Mission Assurance Capability Provide program/customer support across NSS Develop Mission Requirements Utilize relevant Cyber NSS Lessons Learned Apply unique knowledge of NSS & vulnerabilities Implement Net-centric Designs Identify critical cyber assets Provide analysis of NSS anomalies Corporate Cyber & IA Core Competency Leveraging Aerospace depth and breadth across NSS for MA Apply mission information assurance strategy Achieve Independent certification/accreditation Mine R&D efforts for expertise and applicability Identify and Cyber SA needs Working with other FFRDCs Assess and extend understanding Perform threat assessments and cyber operations Influence priorities Aerospace is building upon core strength, adding to existing expertise 6

Aerospace Strategic Commitments in Space Cyber Corporate Strategic Initiative (CSI) in Cyber and IA establishes priorities to Enhance Aerospace capabilities in Space Cyber Influence operations concepts, requirements, and design of NSS systems to ensure Cyber & IA resiliency Document and disseminate programmatic Cyber & IA lessons learned Build an expert Cyber & IA team Cyberspace Corporate Strategic Initiative Project (CSIP) conducts activities for Assessment of corporate cyber capability and capacity Corporate and community awareness and coordination Capability enhancement (including seed projects) Extension of a space system software architecture evaluation methodology/framework/tools to include cyber resilience criteria Identification of cyber influences on mission assurance, and impacts on mission success (requirements, implementation, test, assessment) Corporate Technical Strategic Plan Cyber Thrust Area guides R&D investments 7

Cyber Technical Thrust Area Cyber strategy shifts to sustaining critical mission functions when under cyber attack. Investment focus on System & Mission Resiliency to Cyber Attack Cyber Situational Awareness Advanced Cyber Effects Investment in experimental, analytical, and architectural investigations applicable to ground, space, launch and user segments. Cyber is one of four Aerospace Technical Strategic Thrust Areas 8

Space Segment Vulnerability Defense aka Flight Cyber Defense S&T Example Develop cyber defenses for SVs and LVs Layered defense based on Deter, Detect, Identify, Defend and Recover Autonomous and in cyber time Requirements, architectures, design guidelines, techniques, and code modules Lab environment to demonstrate vulnerabilities and mitigations Customer and Aerospace joint investments in Space Cyber S&T lead to unique advancements in understanding and innovation 9

Space Segment Vulnerability Defense aka Flight Cyber Defense Balanced investigation portfolio yields immediate value and enhances long term opportunities 10

Summary Aerospace capabilities are a strong foundation for addressing NSS Cyber & IA We are thoroughly engaged across the NSS community Our IA and special program activities provide a solid foundation for expanding Cyber & IA capabilities within NSS programs, leading to further understanding and expertise Aerospace s strategic commitments for Cyber & IA build on our expertise and Mission Assurance role Our current workforce depth in space system resiliency, Cyber and IA is our capability baseline We have a plan to improve our Space Cyber & IA capabilities, to include measureable assessments We are investing resources to assure our customers have access to leading edge Cyber & IA tools, technologies and methods for NSS Aerospace is uniquely positioned, and has incomparable insight in the NSS lifecycle, to address Cyber & IA in the context of Mission Assurance 11

Thank you The Aerospace Corporation 2012