Bringing Independent Cybersecurity Assessments to Space Systems

This paper presents a practical experience report on top of the application of Independent Software Verification and Validation (ISVV) in the space domain, specifically on the Galileo Second Generation satellites, and proposes a methodology for security analysis that can be transferred to the Unmanned Aerial Vehicles (UAV) domain. We explore the application of security assessments, similar to ISVV processes. The proposed methodology for security analysis and validation includes security checklists, source code security analysis and various security validation techniques. We expect significant cybersecurity improvements, a contribution to the specification of secure design and security requirements (system and software), and the implementation of comprehensive testing campaigns covering the known space systems threats and vulnerabilities, including mutation and sensitivity analysis, to reduce security threats and risks. Future work involves applying these methods to a UAV case study, collecting relevant metrics, and providing feedback to international standards to further enhance security and safety in these critical domains.