Security Analysis of Low Earth Orbit Satellites Based on Different Software-Defined Networking Structure

Under the Software-Defined Networking (SDN) framework, Low Earth Orbit (LEO) operates with its multiple architectures, including Cross-Domain Controller Architecture, Inter-Domain Controller Architecture, and so on. For cross-domain controller structure, the security of the east-west protocol is considered, including the protocols and sources in its secure design. For the inter-domain controller, the south-north bound protocol and software are used. we proposed a method to build a treatment model to provide a mechanism for the abnormal behavior. On these two architectures, we employed a series of security analysis methods and countermeasures. Regarding the security analysis methods, we used software composite analysis (SCA), static application security testing (SAST), and dynamic application security testing (DAST) to assess the potential threats and attack vectors, and then build a threat model. East-west and south-north (application layer) protocols were considered in building the threat model. With this model, the monitor mechanism was established for the abnormal activities. The security performance was evaluated.