軍 지상기지국 네트워크 분리를 적용한 사이버 위협에 대응 방안

Abstract

Development of space industry in recent years has expanded battlefield from ground, air, and sea to space area. South Korea is now operating eight satellites, and the number of the satellites will be increased to 130 by 2030. Due to such a development, researches on a new way of operation of space systems will be advanced, and which will support military operations in/directly. However, security threat on the space system will also increase, inherently. In particular, it is expected an attack that leads errors on a satellite by beaming high-power frequency an attack space vehicle generates nearby, or that malfunctions a satellite by sending spoofed or exploited messages that paralysis the satellite's subsystem(power, attitude control, etc.) or moves it excessively, as will be discussed in this paper, to a ground station. In order to respond to such an attack, ground stations' control/image/tracking systems should be separated and controlled physically and logically by mission. Specifically, VPN(Virtual Private Network) is required, and the network has to be separated based on each system's information. With the proposed approach, unauthorized users can be identified. Finally, we need to specify the scope of the subsystem's operational criteria in the messages, limit the use of the messages unnecessarily issued, and identify unauthorized access and exploited message in order to operate space systems in a stable manner.