Two U.S. satellites pwned in '07, '08; new report blames China

In 2007 China shot down one of its satellites; anti-sat warfare is so much more convenient from home

By Kevin Fogarty  2 comments

Four times during 2007 and 2008 U.S. observation satellites "experienced interference" that was consistent with what would have happened if hackers from somewhere other than U.S. space agencies had hacked the controls and taken them over.

The ability to compromise another country's satellites would be a critical advantage in war or any lesser conflict, and China appears to be well ahead of the U.S. in its ability to attack satellites physically and digitally, according to a report (PDF) released yesterday by the U.S.-China Economic and Security Review Commission.

Twice during 2008, NASA controllers lost control of the Terra EOS satellite due to "interference" that lasted two minutes the first time and nine the second.

In both instances "the responsible party achieved all steps required to command the satellite, but did not issue commands."

In separate incidents during 2007 and 2008, the U.S. Geological Survey briefly lost control of the Landsat-7 satellite, though the attackers didn't take control themselves.

Even denying enemies control of their own satellites is a huge threat in modern, heavily digitized, GPS-enabled, video-game-like warfare, enabled above all by the ability to rotate satellite cameras into place and see what an enemy or potential enemy is up to, without allowing the enemy to interfere.

In 2007 the Chinese military launched a ballistic missile into orbit to destroy an obsolete Chinese weather satellite. It scared the hell out of NASA because of the sudden cloud of new debris in orbit (which at one point forced astronauts to leave the International Space Station to during one dangerous pass by the debris.

It scared more hell out of the Pentagon, which depends on its satellites for everything from knowing where enemy troops are concentrating to getting directions from the barracks to the mess hall on giant Middle Eastern military bases.

The U.S. shot down one of its own satellites in 1985, but scientists quoted in 2007 were surprised the Chinese had the missile and guidance technology to manage it themselves.

Physically striking a missile orbiting at 500 miles – far higher than most spy satellites – is a real achievement, they said.

Hacking one from the ground may be equally as important an achievement, but with far lower costs and far, far more deniability.

"If executed successfully, such interference has the potential to pose numerous threats, particularly if achieved against satellites with more sensitive functions," the report read. "For example, access to a satellite’s controls could allow an attacker to damage or destroy the satellite. The attacker could also deny or degrade as well as forge or otherwise manipulate the satellite’s transmission. A high level of access could reveal the satellite’s capabilities or information, such as imagery, gained through its sensors. Opportunities may also exist to reconnoiter or compromise other terrestrial or space-based networks used by the satellite." – U.S.-China Economic and Security Review Commission, Nov. 16, 2011.

The report couldn't pin blame for the attacks on China, but did say the techniques involved were consistent with those seen in other attacks the Dept. of Defense has blamed on China.

They're also consistent with the Chinese effort to weaponize space by developing missiles and other systems to destroy or interfere with U.S. satellites, and to support satellite-guided weapons such as a long-range missile that can correct its own course using GPS to attack targets at sea.

The report is unusually specific in its recommendations that the U.S. needs a "show of force deterrence" against the power of China's growing satellite- and anti-satellite capabilities.

It also recommends the Pentagon start training exercises based on the assumption someone else has taken over or destroyed the satellites on which many military systems depend, and broaden its own anti-satellite capabilities to defend against threats from attackers who can apparently weaken another country's conquest of space without leaving their own cubicles.

Read more of Kevin Fogarty's CoreIT blog and follow the latest IT news at ITworld. Follow Kevin on Twitter at @KevinFogarty. For the latest IT news, analysis and how-tos, follow ITworld on Twitter and Facebook.

Photo Credit: 

NASA: Terra EOS satellite (artist's rendering)

ITworld LIVE

SecurityWhite Papers & Webcasts

Webcast On Demand

Seven Deadly Sins of Cloud Security (Video)

As cloud computing gains popularity, too few people are aware of the security threats that are emerging. In this short video, experts from HP discuss the latest cloud security threats and explain measures to help overcome them. Hear about the seven deadly sins of cloud security and learn how to avoid becoming a victim of poor security in your cloud environment.Intel and the Intel logo are trademarks of Intel Corporation in the U.S. and/or other countries.

Sponsor: HP & Intel

White Paper

Establishing a Strategy for Database Security is No Longer Optional

The options for securing increasingly valuable databases are very broad and deep, and can be confusing. This research provides an overview of three categories of controls that should be implemented to ensure that enterprise data is protected in the most efficient and effective manner.

White Paper

Database Activity Monitoring Is Evolving

Read the analyst report and learn how you can leverage the core capabilities of a DAP solution for better database security.

White Paper

Protecting Against Database Attacks and Insider Threats: Top 5 Scenarios

Read this new eBook to learn the top five scenarios and essential best practices for preventing database attacks and insider threats.

Webcast On Demand

Distributed Database Security with Real-time Monitoring

View this demo and learn how IBM InfoSphere Guardium database activity monitoring can help protect your sensitive data in distributed DBMS environments with a holistic approach to data security and compliance.

Sponsor: IBM

See more White Papers | Webcasts

Ask a question

Ask a Question