Security analysis of the INTELSAT VI and VII command network

Some results of a study of the command security issues associated with the INTELSAT VI and VII satellites are reported. The configuration and protocols of the INTELSAT command system are briefly described. Three possible configurations for connecting the INTELSAT headquarters and the telemetry, tracking, and command (TTC) stations are distinguished, and a layered architecture is introduced to illustrate the command protocols corresponding to the ISO layers. The impact of introducing command security is then studied for the INTELSAT command network. In order to analyze the effect of errors on the operation and performance of the command network, a finite-state Markov chain is proposed for modeling the command and telemetry channels with their different error and delay characteristics. Possible risks that can threaten the INTELSAT secure command network operations, including single-event upsets, Vcc corruption, and manipulation of transmitted messages, are analyzed. The end-to-end performance of the INTELSAT command network is examined for three possible configurations-terrestrial link, single-hop satellite, and two-hop satellite