That’s No Moon, It’s an Insecure PLC
In a noteworthy development at the annual hacking conference Defcon, the Aerospace Village is set to enhance its offerings this year. Known for hosting the unique Hack-A-Sat contest, which in 2023 featured the live hacking of a real satellite in orbit, the village aims to attract a broader audience by providing a range of games and competitions appealing to individuals with varying levels of expertise.
Steve Luczynski, a former U.S. Air Force pilot and one of the village’s founders, shared the initiative’s goal—to create hands-on experiences accessible to all visitors, whether they are seasoned professionals or complete novices. Luczynski emphasized that the village’s activities are designed to engage everyone, stating, “Beginners, experts, anybody can come in and find and enjoy the challenge and the learning because of the wide range of what is offered.” The conference takes place in Las Vegas from August 6 through August 9, further positioning the Aerospace Village as a hub for innovative education in cybersecurity.
At its core, the Aerospace Village, now in its eighth year, will feature Starpwn—a Jeopardy-style capture-the-flag (CTF) contest that simulates various stages of hacking attacks on space systems. The contest aims to expose participants to the complexities of cybersecurity in the context of space exploration and technology.
This year, the Aerospace Corporation, a federally funded R&D center focused on space and national security, will unveil SpaceCop, an open-source intrusion detection and prevention system intended for onboard satellites. Attendees will be challenged to infiltrate a replica satellite system’s software undetected by SpaceCop, adding an exhilarating layer to the CTF experience.
Additionally, the Space Grand Challenge, a Clue-type CTF geared toward middle and high school students, will migrate to the village this year. Teams will investigate a simulated breach of another replica space system, transforming learning into an engaging competition. For those new to the field or in management roles, a space-themed version of the iconic 1985 video game Oregon Trail introduces the ramifications of cyberattacks on both space and ground systems, thereby making cybersecurity education enjoyable and relatable.
Spread over an impressive 12,000 square feet, this year’s village stands as the largest iteration to date, doubling the size of its inaugural village in 2019. Luczynski remarked on the steady growth over the years, attributing it not only to escalating concerns surrounding space security but also to an increasing enthusiasm for a new era of space activities driven by both commercial enterprises and government initiatives.
The response to hands-on demonstrations of space hardware has been overwhelmingly positive. Participants have previously shown immense interest in pieces brought to the village floor by commercial and government sponsors, like a spacesuit and Starlink terminal from SpaceX in 2023 and a cubesat from Tokyo-based ISP GMO this year. Luczynski noted, “It’s been wildly popular. People come to Defcon, see what our partners offer, and they are eating it up. They want more. They want hands-on experiences,” hinting that nearly every one of the 25,000 to 30,000 Defcon attendees is drawn to the village out of curiosity and eagerness to learn.
Historically, the Aerospace Village, initially known as the Aviation Village in 2019, pivoted its focus to space-based cybersecurity in 2020. This transformation occurred during discussions between village founder Pete Cooper and Will Roper, who was then the Assistant Secretary of the Air Force for Acquisition, Technology, and Logistics. Since undertaking this change, the village has garnered the support of various entities within the commercial space sector, including Blue Origin, SpaceX, Boeing, Lockheed Martin, and Embry-Riddle Aeronautical University, alongside many smaller companies.
Volunteers have been critical to the success of the Aerospace Village, as is the dedication of sponsors who contribute their employees’ time—all vital for the operation and growth of the village. For instance, SixGen, a start-up focused on cybersecurity within the defense and aerospace sectors, is participating as a sponsor this year. While specifics about financial support were not disclosed, SixGen Chief Scientist Jacob Oakley noted that their employees’ involvement represented a coordinated effort that went well beyond typical sponsorship.
The challenges devised by Aerospace Corp. for the Starpwn CTF this year are sophisticated and cater to participants of varying skill levels. These include a wireless hacking challenge where contestants disrupt communications between ground antennas and spacecraft, an operational technology challenge requiring contestants to reprogram a programmable logic controller to immobilize satellite antennas, and a packet-hacking challenge that involves decoding space protocols from network traffic captures.
Henry Danielson, an adjunct professor at Cal Poly and a village volunteer, highlighted the importance of using the allure of space to engage youth in cybersecurity fields. By integrating exciting themes like space and aliens, Danielson believes they can pique interest in cybersecurity among younger audiences, opening doors to careers in the industry that are otherwise overlooked.
This comprehensive approach to education and engagement in cybersecurity within the context of space systems reflects an industry increasingly aware of its vulnerabilities and the diverse talent needed to address these challenges. As the Aerospace Village prepares for another successful year at Defcon, it stands at the crossroads of education, competition, and innovation, underscoring the importance of collaboration and hands-on experience in an evolving technological landscape.