1
00:00:19,980 --> 00:00:27,360
So, the Department of Defense, historically, has operated cyber security through obscurity.

2
00:00:27,360 --> 00:00:31,400
And that is a culture that we're trying to change.

3
00:00:31,400 --> 00:00:40,780
So, we're getting outside of our fence lines and involving communities that can help us, like DEF CON, to see if we need to up our game in cyber.

4
00:00:40,780 --> 00:00:43,220
We need more security researchers in the industry.

5
00:00:43,220 --> 00:00:50,840
We need the existing security researchers that are out there to connect with the space and aerospace community.

6
00:00:50,920 --> 00:00:56,400
And it isn't enough to have them come in after the fact and to do a security assessment at the end.

7
00:00:56,400 --> 00:01:02,480
We need the researchers to be a part of the development team and include them within the entire lifecycle of these systems.

8
00:01:07,620 --> 00:01:13,400
Welcome to Space Security Challenge 2020, HackASAT, the final event.

9
00:01:13,400 --> 00:01:22,440
As the democratization of space opens up a new frontier for exploration and innovation, we see new cyber security vulnerabilities emerging.

10
00:01:23,420 --> 00:01:35,200
The Space Security Challenge is designed to inspire the world's top cyber security talent to develop the skills necessary to secure this last frontier of cyber security, space.

11
00:01:40,980 --> 00:01:45,760
Every federally funded lab is charted with the mission of technology transfer.

12
00:01:45,760 --> 00:01:51,740
Technology transfer is all about taking government-owned intellectual property and transferring it to the public domain.

13
00:01:51,740 --> 00:01:58,620
The Air Force Research Lab and our charter to perform tech transfer put us in the best position to lead this effort.

14
00:01:58,940 --> 00:02:07,860
But first, we had to overcome the monumental task of convincing people that hacking a satellite was actually a good thing to do in the name of improving space security.

15
00:02:07,860 --> 00:02:14,380
But we persevered and our mission fueled the creation of what we called the Space Security Challenge 2020, HackASAT.

16
00:02:17,800 --> 00:02:22,300
At the heart of it, we needed to create a community where one didn't currently exist.

17
00:02:22,300 --> 00:02:31,440
And we wanted to leverage the challenge model because we've learned a lot from DARPA and they've been very successful at creating communities through challenges.

18
00:02:31,460 --> 00:02:48,060
And so DARPA created this challenge back in like 2004, bringing together the AI industry, the sensor industry or community, and also the automotive industry to formulate a challenge to improve the security of the automotive industry leveraging AI.

19
00:02:48,060 --> 00:02:55,640
Now you fast forward 15 years, we have a fully functioning industry of autonomous vehicles.

20
00:02:55,820 --> 00:03:00,000
And that's ultimately where we're going with Space Security Challenge HackASAT.

21
00:03:00,000 --> 00:03:05,120
We want to build trust and security into our space systems.

22
00:03:05,240 --> 00:03:07,800
So we needed to get the attention of the hacker community.

23
00:03:07,800 --> 00:03:16,180
And we're not typically as the Air Force and now Space Force, we're not trying to do outreach to the hacker community.

24
00:03:16,180 --> 00:03:18,660
So we had a new unique challenge on our hands.

25
00:03:18,660 --> 00:03:26,400
We also needed to get the attention of policymakers and the general public and industry.

26
00:03:26,400 --> 00:03:30,960
We needed people to care about this because it affects all of us.

27
00:03:31,180 --> 00:03:32,880
And then the pandemic hit.

28
00:03:32,960 --> 00:03:39,620
And all of our plans to run the finals at DEF CON, with the building audience of tens of thousands that DEF CON attracts, shattered.

29
00:03:39,780 --> 00:03:40,820
So we pivoted.

30
00:03:44,130 --> 00:03:50,810
So we needed to figure out a way to hold finals virtually and still achieve our goal of cultivating a research community.

31
00:03:50,810 --> 00:03:55,590
And it became apparent that this pivot to virtual was actually more of an opportunity.

32
00:03:55,630 --> 00:04:01,210
It was an opportunity to reach people who wouldn't have normally been able to travel to DEF CON.

33
00:04:01,210 --> 00:04:06,950
But there were huge challenges associated with this for both the competitors and the spectators.

34
00:04:06,950 --> 00:04:12,690
So in July, we shipped each team leader a flat sat, which came with an air bearing.

35
00:04:12,690 --> 00:04:26,150
What the teams could do is they could put their flat sat on top of the air bearings, and then they could use the attitude control system in the flat sat to be able to rotate the flat sat to kind of emulate what it would be like if they were in space.

36
00:04:26,150 --> 00:04:32,350
But with COVID, what we didn't anticipate were the global shipping timelines.

37
00:04:32,650 --> 00:04:35,990
Two of our teams didn't get their flat sats until later.

38
00:04:36,030 --> 00:04:44,130
In fact, the third place team, Flux Repeat Rocket, didn't even receive their flat sat until the morning of the competition on August 7th.

39
00:04:44,130 --> 00:04:45,710
That was a real nail biter.

40
00:04:46,370 --> 00:04:47,990
Then there were the spectators.

41
00:04:47,990 --> 00:04:49,670
After all, the world is watching now.

42
00:04:49,670 --> 00:04:55,350
We needed to be able to give people all over the world a way to feel like they were part of the action.

43
00:04:55,350 --> 00:05:03,190
So we built this fully immersive 3D environment for spectators to explore and watch the competition.

44
00:05:03,190 --> 00:05:10,810
We did our best to give it a DEF CON feel so that people really felt like they were still part of that environment that we worked so hard to be part of.

45
00:05:10,810 --> 00:05:16,070
And so as part of this environment, we created this extensive library of content and videos.

46
00:05:16,090 --> 00:05:29,990
And so all of the content that we created on HackASAT, as well as all of the videos that were created, are available on our GitHub page and our YouTube channel, and where you can access that information and continue to learn about hacking, cyber, and space.

47
00:05:36,410 --> 00:05:40,930
The scenario was based around a mock stolen satellite.

48
00:05:40,930 --> 00:05:57,530
Once the teams were on the satellite, the remaining challenges had to do with removing the presence of the malicious actor that was on that satellite, orient it so that they could then use the imager to take a photo of the moon that we had set up inside of the facility where the flatsats were all located.

49
00:05:57,890 --> 00:06:06,550
The other part of the challenge, the teams were tasked with coming up with a command set that would point an actual satellite at the actual moon.

50
00:06:06,670 --> 00:06:15,730
Teams were given a very limited amount of time to accomplish that goal, and one of them was able to successfully take a photo of the moon using that command set.

51
00:06:15,750 --> 00:06:20,430
We're going to answer the question as to which team had their code sent into space tonight.

52
00:06:20,450 --> 00:06:30,290
Congrats to Team Poland Can into Space for submitting not only the best solution overall throughout the whole evaluation period, but the solution that is going to space.

53
00:06:30,290 --> 00:06:37,150
We expect the moonshot to happen in a couple of hours at 630 pacific, and that picture will be sent down to earth at about 1am pacific.

54
00:06:38,090 --> 00:06:53,010
There will be people who are hacking satellites, and so by having the federal government structure this in a nice, organized, and safe way, we can do it without getting in any trouble, and they can get the results and the understanding that they need from an attacker's perspective.

55
00:06:53,350 --> 00:07:00,510
Having the ability to approach something with the mindset of, you know, how could I break this, always helps you understand how a system works better.

56
00:07:00,550 --> 00:07:04,430
It's something we all as a community have to be thinking about.

57
00:07:04,690 --> 00:07:07,770
And the security community wants to be a part of that.

58
00:07:07,770 --> 00:07:21,370
They would like to be involved with these systems, would like to secure these systems, would like to learn more about these systems, so openness and transparency, and getting access to more of these systems going forward.

59
00:07:21,650 --> 00:07:27,850
And we need the space community, the aerospace community, to be open and available and receptive to that.

60
00:07:28,290 --> 00:07:34,350
And that's what we were trying to accomplish with Hack-A-Sat, put on a game that brought those two communities together and raised that awareness.

61
00:07:34,350 --> 00:07:36,650
And I think we did a good job of that.

62
00:07:36,790 --> 00:07:42,590
Now we hand the ball off, maybe, to the aerospace community to take that over.

63
00:07:42,590 --> 00:08:00,230
So the direction I think we're going, that we ought to go, is fully embracing the hacker community at DEFCON, and not waiting till systems are built to create opportunities to learn and help us learn, help us make them more secure before we're producing them.

64
00:08:00,230 --> 00:08:02,170
The systems we build are unique.

65
00:08:02,170 --> 00:08:12,590
They have some pretty amazing technology in them, and I think the opportunity for the hacker community to get new hands-on experience would also be really energizing and cool.

66
00:08:12,670 --> 00:08:21,870
So events like Hack-A-Sat are awesome live events, but the relationship and continuing it across a broader set of opportunities is what's more exciting.

67
00:08:21,870 --> 00:08:26,870
A year ago, hacking a satellite felt pretty hard, but we're there now.

68
00:08:27,630 --> 00:08:32,510
You know, we aren't what you expect, and we do really, really cool things.

69
00:08:34,830 --> 00:08:37,630
Last thing, thanks for joining us.

70
00:08:37,630 --> 00:08:42,050
The future of space security depends on the work we're doing together.