Lessons from the cloud will improve security for satellites.

In June 2021, Microsoft joined Space Information Sharing and Analysis Center (Space ISAC), the Colorado Springs-headquartered platform that facilitates collaboration across the global space industry. As the first hyperscale cloud service provider to join Space ISAC, Microsoft intends to contribute ideas and information necessary to create a strong and scalable cloud. The company’s efforts will allow for large-scale, secure exchanges of data across space systems.
Microsoft’s presence on Space ISAC’s board of directors, its monetary investment in Space ISAC, and its experience with creating Azure Space will add to Space ISAC’s ability to improve security for space-related projects. Microsoft’s representative on Space ISAC’s board of directors will be Bill Chappell, vice president of mission systems and chief technology officer of Microsoft Azure.

Microsoft expects to share its expertise in four key areas, space ground systems, cybersecurity, cloud processing and data transport. Space ground systems include all the components that help to control a craft like the International Space Station, from a mission control center to launch facilities. Cybersecurity for space relates to protecting infrastructure such as satellites from cyberattacks. Cloud computing in space relates to offering satellite broadband as well as extending connectivity between cloud datacenter regions and cloud edge devices. Data transport helps deliver data in real time via intersatellite links to military service personnel and corporations that purchase satellite data.

Cybersecurity for space systems is a relatively unknown territory. Frank Backes is the Chair of the Board of Directors for Space ISAC and Senior Vice President of Kratos Space Federal. Kratos Space Federal develops systems for defense and space-related projects, such as satellite communications and missile defense. Backes indicated Space ISAC welcomes companies with deep security expertise, such as Microsoft.
“Microsoft brings its longstanding history of proficiency in cybersecurity to its role as a founding member, including its experience detecting and stopping attacks and eliminating persistent threats,” said Backes.
Microsoft currently analyzes over 8 trillion diverse signals daily across over 200 global consumer and commercial services. It invests over $1 billion annually on cybersecurity. In addition, Microsoft has a team of more than 3,500 global security experts across 77 countries. These professionals interpret and contribute to the insights gained from Microsoft’s advanced engineering and telemetry. The company’s threat detection technologies are built into Azure, Windows, and Microsoft 365.
The features of Azure Space in particular that will allow Microsoft to better protect space missions include customized hardware, security controls integrated into the hardware, and protections against threats like a distributed denial-of-service (DDoS) attack, which can disrupt the traffic of a service or network.
Tom Keane, corporate vice president of Microsoft Azure, said the information that Microsoft will gather will enhance the space community’s ability to develop defense strategies.
“Mitigating today’s threat landscape in cyberspace requires navigating never-before-seen challenges. This navigation occurs amidst rapid commercial advancements in communications infrastructure, satellite connectivity and broadband. To support our customers in their missions, Microsoft will continue to keep security at the epicenter of all we do,” said Keane.
Space ISAC is the only space-dedicated ISAC in the world. An ISAC is a nonprofit that allows the private and public sectors to share information to guard a resource against cyber threats.
Space ISAC developed out of a study conducted by NASA’s Science and Technology Partnership Forum in 2014. The nonprofit was launched in April 2019 from the offices of the National Cybersecurity Center (NCC).
The NCC itself is a nonprofit, non-governmental organization. Other projects of the National Cybersecurity Center include Secure the Vote, a project to increase voter confidence in the U.S. on the accuracy of vote counting, and Cybersecurity for State Leaders, a Google-supported initiative to empower state lawmakers and staff to utilize smart cybersecurity practices.