Search papers, labs, and topics across Lattice.
This paper introduces AegisSat, a security framework designed to protect AI-enabled SoC FPGA satellite platforms against malicious attacks and unauthorized modifications. AegisSat employs a defense-in-depth approach by integrating secure boot mechanisms, runtime resource isolation, authenticated in-orbit reconfiguration, and rollback capabilities. Experimental results demonstrate the feasibility of integrating these mechanisms on modern SoC FPGA devices, enhancing the trustworthiness and resilience of satellite systems.
AegisSat offers a defense-in-depth security framework that fortifies AI-enabled satellite systems against critical vulnerabilities, ensuring reliable and secure operation in the harsh space environment.
The increasing adoption of System-on-Chip Field-Programmable Gate Arrays (SoC FPGAs) in AI-enabled satellite systems, valued for their reconfigurability and in-orbit update capabilities, introduces significant security challenges. Compromised updates can lead to performance degradation, service disruptions, or adversarial manipulation of mission outcomes. To address these risks, this paper proposes a comprehensive security framework, AegisSat. It ensures the integrity and resilience of satellite platforms by (i) integrating cryptographically-based secure boot mechanisms to establish a trusted computing base; (ii) enforcing strict runtime resource isolation; (iii) employing authenticated procedures for in-orbit reconfiguration and AI model updates to prevent unauthorized modifications; and (iv) providing robust rollback capabilities to recover from boot and update failures and maintain system stability. To further support our claims, we conducted experiments demonstrating the integration of these mechanisms on contemporary SoC FPGA devices. This defense-in-depth framework is crucial for space applications, where physical access is impossible and systems must operate reliably over extended periods, thereby enhancing the trustworthiness of SoC FPGA-based satellite systems and enabling secure and resilient AI operations in orbit.
