AegisSat: Securing AI-Enabled SoC FPGA Satellite Platforms

TL;DR

This paper introduces AegisSat, a security framework for AI-enabled satellite systems using SoC FPGAs, focusing on secure boot, resource isolation, authenticated updates, and rollback to ensure system integrity and resilience.

Contribution

It presents a comprehensive security framework tailored for satellite platforms with SoC FPGAs, integrating cryptographic, isolation, and recovery mechanisms to enhance security and reliability.

Findings

Successful integration of security mechanisms on FPGA devices

Enhanced system integrity and resilience demonstrated

Framework suitable for long-term space operations

Abstract

The increasing adoption of System-on-Chip Field-Programmable Gate Arrays (SoC FPGAs) in AI-enabled satellite systems, valued for their reconfigurability and in-orbit update capabilities, introduces significant security challenges. Compromised updates can lead to performance degradation, service disruptions, or adversarial manipulation of mission outcomes. To address these risks, this paper proposes a comprehensive security framework, AegisSat. It ensures the integrity and resilience of satellite platforms by (i) integrating cryptographically-based secure boot mechanisms to establish a trusted computing base; (ii) enforcing strict runtime resource isolation; (iii) employing authenticated procedures for in-orbit reconfiguration and AI model updates to prevent unauthorized modifications; and (iv) providing robust rollback capabilities to recover from boot and update failures and maintain system stability. To further support our claims, we conducted experiments demonstrating the integration of these mechanisms on contemporary SoC FPGA devices. This defense-in-depth framework is crucial for space applications, where physical access is impossible and systems must operate reliably over extended periods, thereby enhancing the trustworthiness of SoC FPGA-based satellite systems and enabling secure and resilient AI operations in orbit.