Search papers, labs, and topics across Lattice.
This paper addresses the cybersecurity risks specific to CubeSat missions, which are often overlooked due to the resource limitations and decentralized nature of these systems. It adapts established risk assessment frameworks like NIST and ISO to create a contextually appropriate framework for CubeSats, including a vulnerability register coded using STRIDE, MITRE ATT&CK, and CVSS. The framework introduces Security-per-Watt (SpW) and a Distributed Security Paradigm (DSP) to optimize security within power and governance constraints, demonstrating significant improvements in SpW for cryptographic choices and incident response.
CubeSat cybersecurity gets a power-conscious upgrade: a new framework shows how distributed incident response and optimized cryptography can boost security by up to 2.7x without breaking the (power) bank.
CubeSats have democratised access to space for universities, start-ups and emerging space nations, but the same design decisions that reduce cost and complexity introduce distinctive cybersecurity risks. Existing risk assessment frameworksNIST SP 800-37/53 [1, 2], ISO/IEC 27001/27005 [3, 4] and supply-chain guidance such as NIST SP 800-161 [5]assume abundant computational resources, centralised monitoring and mature governance structures that do not hold for power-limited, intermittently connected CubeSat missions. This paper develops a contextually appropriate risk assessment framework tailored to CubeSat environments, grounded in a 42-entry vulnerability register coded using STRIDE [6], MITRE ATT&CK [7] and CVSS v3.1 [8]. The register reveals that risks concentrate in communication and ground segments (mean CVSS 8.08.2) rather than distributing uniformly across subsystems. The framework introduces two constructs: a Security-per-Watt (SpW) heuristic that quantities security benefit per unit power, and a Distributed Security Paradigm (DSP) that reconceptualises incident response as an autonomous, constellation-level function rather than a purely ground-centric process. Scenario-based analysis demonstrates that adapted controls and distributed incident handling can achieve up to 2.7X higher SpW for cryptographic choices and 1.98X higher SpW for incident-response strategies compared with naive terrestrial transpositions, while remaining feasible for typical CubeSat power and governance constraints. The approach provides mission designers, operators and regulators with proportionate, auditable guidance, and offers a reusable pattern for adapting enterprise security frameworks to other severely constrained cyber-physical systems.
