HoneySat: A Network-based Satellite Honeypot Framework

TL;DR

HoneySat is a novel high-interaction satellite honeypot framework that convincingly simulates SmallSat missions, effectively deceives adversaries, and collects valuable security data, advancing satellite cybersecurity research.

Contribution

It introduces HoneySat, the first comprehensive satellite honeypot capable of realistic SmallSat simulation and real-world adversary engagement, filling a critical gap in satellite security data collection.

Findings

90% of operators found HoneySat realistic

Collected 22 real-world adversarial interactions

Successfully communicated with an in-orbit SmallSat

Abstract

Satellites are the backbone of several mission-critical services that enable our modern society to function, for example, GPS. For years, satellites were assumed to be secure because of their indecipherable architectures and the reliance on security by obscurity. However, technological advancements have made these assumptions obsolete, paving the way for potential attacks, and sparking interest in satellite security. Unfortunately, to this day, there is no efficient way to collect data on adversarial techniques for satellites, hurting the generation of security intelligence that can lead to the development of effective countermeasures. In this paper, we present HoneySat, the first high-interaction satellite honeypot framework, fully capable of convincingly simulating a real-world CubeSat, a type of Small Satellite (SmallSat). To provide evidence of HoneySat's effectiveness, we surveyed experienced SmallSat operators in charge of in-orbit satellites and deployed HoneySat over the Internet to entice adversaries. Our results show that 90% of satellite operators agreed that HoneySat provides a realistic and engaging simulation of a SmallSat mission. Additionally, HoneySat successfully deceived human adversaries in the wild and collected 22 real-world satellite-specific adversarial interactions. Finally, in a major demonstration of HoneySat's robustness, we collaborated with an aerospace company to perform a hardware-in-the-loop operation that resulted in HoneySat successfully communicating with an in-orbit, operational SmallSat mission.