Skip to content Skip to footer

Security Testing Is a Continuous Process, Not a One-Time Event

Software products evolve constantly. New features are added, dependencies change, interfaces expand, and deployment environments become more complex. Each change can create new security assumptions - and new opportunities for those assumptions to fail. That is why vulnerability assessment should not be treated as a one-time activity performed shortly before a product ships. Effective security…

Read More

sle provider banner

Open-Source Space Link Extension (SLE) Provider Maintenance v1.0.0 Release

The CCSDS Space Link Extension (SLE) protocol is a set of standardized communication protocols developed by the Consultative Committee for Space Data Systems (CCSDS). The primary purpose of SLE protocols is to facilitate the efficient and reliable transfer of space mission data between ground stations and mission control centres, ensuring interoperability among various international space…

Read More

Remote Code Execution via Man-in-the-Middle (and more) in NASA’s AIT-Core v2.5.2

Written by: Andy Olchawa, Milenko Starcik The NASA - National Aeronautics and Space Administration AMMOS Instrument Toolkit (AIT) is a versatile, Python-based software suite designed to handle a wide range of tasks associated with Ground Data Systems (GDS), Electronic Ground Support Equipment (EGSE), commanding, telemetry uplink/downlink, and sequencing for both instrument and CubeSat missions. Building…

Read More

How to crash a Spacecraft – DoS through Vulnerability in NASA CryptoLib v1.3.0

CryptoLib, a software library developed by NASA, implements the CCSDS Space Data Link Security Protocol (SDLS) to secure communications between spacecraft running the Core Flight System (cFS) and their corresponding ground stations. The library is essential in safeguarding the integrity and confidentiality of data exchanged during space missions.

Read More

Ground Control to Major Threat: Hacking the Space Link Extension Protocol

Space missions have increasingly been the subject of security breaches and satellite hacks. Most discussions revolve around direct communication and access to spacecraft through means such as Software Defined Radio. However, the reality is that this approach isn’t practical for most adversaries, as it requires substantial resources and is easily detectable due to the power…

Read More