
The exposure
The satellite is only as secure as the ground station.
Command and telemetry pass through antenna controllers, modems and mission software that were built for availability, not adversaries. Ground segments often share vendors, remote access paths and flat networks with the corporate side.
NIST IR 8401Space Policy Directive-5IEC 62443
■Command and telemetry link integrity
■Ground station and antenna controller access control
■Segmentation between mission operations and enterprise networks
Typical topologyExposed path
L3.5 · DMZGround segment DMZ
VENDOR VPN
L2 · HMIMission control HMI
L2 · SCADASatellite ops / C2
L2 · HISTORIANTelemetry archive
L1 · PLCAntenna controller
L1 · RTURF modem
L1 · SAFETYRange safety
L0 · PROCESSAntennas · RF chain · spacecraft link
Where we start
