Cybersecurity Analysis Challenges of Legacy Ground Data System

Most of the legacy space missions operated on a decades-old Ground Data System (GDS). Unfortunately, decades ago, IT security design is done separately from the design of GDS' mission operational capabilities. This incoherent practice left many security vulnerabilities without notice in an extended mission phase mission. Identifying the vulnerabilities that may exist in a legacy GDS becomes urgent. Unknown threats can exploit the mission operation without knowing the cybersecurity vulnerabilities. The threats can affect one or all of the GDS capabilities. For example, tampering with spacecraft commands, unauthorized use of a system to create unwanted science products, and disrupting a command uplink. The consequence can cause a mission to end with losing the spacecraft. However, it is a daunting task to perform a cybersecurity risk assessment on a decades-old system.