一句话：提出面向卫星的入侵检测系统应用方法论愿景，涵盖多级规则与机器学习、组件部署、本体可视化与更新策略。
卫星在现代社会中作用关键，其安全日益重要，但受限于计算资源、持续演变的网络威胁以及卫星的孤立性，难以部署有效安全方案。本文提出一种面向卫星的入侵检测系统（IDS）应用方法论愿景：采用多级结构，针对不同任务类型定义基于规则和机器学习的安全方法；通过策略性地放置 IDS 组件并权衡各位置利弊，提高检测可靠性；提出基于本体的 IDS 配置可视化方法，以清晰展示系统能力、增强态势感知并辅助威胁识别与响应；同时给出在保持效率与安全前提下更新 IDS 的策略。该愿景旨在提升卫星运营的网络安全措施及其对网络攻击的韧性。
The security of satellites has become critical in recent years due to their important role in modern society. However, numerous challenges, including limited computing resources, evolving cyber threats, and the isolated nature of satellites, hinder the development of effective security solutions. Different solutions should be implemented and combined to protect space assets: encryption, access control, zero-trust architecture, etc. This vision presents the challenges and aspects to consider for implementing an Intrusion Detection System (IDS) tailored to improve the security of satellite systems. Our approach uses a multi-level structure to define rule-based and machine-learning security approaches that address the challenges associated with different mission types. By strategically placing IDS components and considering the trade-offs of each location, we improve detection reliability. Additionally, we present an ontology-based method for visualizing the IDS configuration, which provides clear insight into system capabilities, enhances situational awareness, and facilitates identification and response to potential threats. We also provide strategies for updating the IDS while maintaining efficiency and security. This vision helps improve the cybersecurity measures of satellite operations and increase their resilience to cyberattacks.
@inproceedings{paperbot8367,
title = {A vision on a methodology for the application of an Intrusion Detection System for satellites},
author = {Sébastien Gios and Charles-Henry Bertrand Van Ouytsel and Mark Diamantino Caribé and Axel Legay},
booktitle = {ASE},
year = {2024},
doi = {10.1145/3691620.3695314}
}