start	end	text
19980	27360	So, the Department of Defense, historically, has operated cyber security through obscurity.
27360	31400	And that is a culture that we're trying to change.
31400	36960	So, we're getting outside of our fence lines and involving communities that can help us,
36960	40780	like DEF CON, to see if we need to up our game in cyber.
40780	44980	We need more security researchers in the industry. We need the existing security researchers that
45740	50840	are out there to connect with the space and aerospace community.
50920	56400	And it isn't enough to have them come in after the fact and to do a security assessment at the end.
56400	60100	We need the researchers to be a part of the development team and include them
60100	62480	within the entire lifecycle of these systems.
67620	73400	Welcome to Space Security Challenge 2020, HackASAT, the final event.
73400	78820	As the democratization of space opens up a new frontier for exploration and innovation,
78820	82440	we see new cyber security vulnerabilities emerging.
83420	88240	The Space Security Challenge is designed to inspire the world's top cyber security talent
88240	95200	to develop the skills necessary to secure this last frontier of cyber security, space.
100980	105760	Every federally funded lab is charted with the mission of technology transfer.
105760	109300	Technology transfer is all about taking government-owned intellectual property
109300	113900	and transferring it to the public domain. The Air Force Research Lab and our charter
113900	118620	to perform tech transfer put us in the best position to lead this effort.
118940	122700	But first, we had to overcome the monumental task of convincing people
122700	127860	that hacking a satellite was actually a good thing to do in the name of improving space security.
127860	131660	But we persevered and our mission fueled the creation of what we called
131660	134380	the Space Security Challenge 2020, HackASAT.
137800	142300	At the heart of it, we needed to create a community where one didn't currently exist.
142300	146740	And we wanted to leverage the challenge model because we've learned a lot from DARPA
146740	151440	and they've been very successful at creating communities through challenges.
151460	158020	And so DARPA created this challenge back in like 2004, bringing together the AI industry,
158020	164120	the sensor industry or community, and also the automotive industry to formulate a challenge
164120	168060	to improve the security of the automotive industry leveraging AI.
168060	175640	Now you fast forward 15 years, we have a fully functioning industry of autonomous vehicles.
175820	180000	And that's ultimately where we're going with Space Security Challenge HackASAT.
180000	185120	We want to build trust and security into our space systems.
185240	187800	So we needed to get the attention of the hacker community.
187800	191880	And we're not typically as the Air Force and now Space Force,
191880	196180	we're not trying to do outreach to the hacker community.
196180	198660	So we had a new unique challenge on our hands.
198660	206400	We also needed to get the attention of policymakers and the general public and industry.
206400	210960	We needed people to care about this because it affects all of us.
211180	212880	And then the pandemic hit.
212960	215660	And all of our plans to run the finals at DEF CON,
215660	219620	with the building audience of tens of thousands that DEF CON attracts, shattered.
219780	220820	So we pivoted.
224130	227210	So we needed to figure out a way to hold finals virtually
227210	230810	and still achieve our goal of cultivating a research community.
230810	235590	And it became apparent that this pivot to virtual was actually more of an opportunity.
235630	241210	It was an opportunity to reach people who wouldn't have normally been able to travel to DEF CON.
241210	246950	But there were huge challenges associated with this for both the competitors and the spectators.
246950	252690	So in July, we shipped each team leader a flat sat, which came with an air bearing.
252690	256870	What the teams could do is they could put their flat sat on top of the air bearings,
256870	261670	and then they could use the attitude control system in the flat sat to be able to rotate
261670	266150	the flat sat to kind of emulate what it would be like if they were in space.
266150	272350	But with COVID, what we didn't anticipate were the global shipping timelines.
272650	275990	Two of our teams didn't get their flat sats until later.
276030	278570	In fact, the third place team, Flux Repeat Rocket,
278570	284130	didn't even receive their flat sat until the morning of the competition on August 7th.
284130	285710	That was a real nail biter.
286370	289670	Then there were the spectators. After all, the world is watching now.
289670	294650	We needed to be able to give people all over the world a way to feel like they were part of the
294650	300610	action. So we built this fully immersive 3D environment for spectators to explore
301230	306090	and watch the competition. We did our best to give it a DEF CON feel so that people really
306090	310810	felt like they were still part of that environment that we worked so hard to be part of.
310810	316070	And so as part of this environment, we created this extensive library of content and videos.
316090	320790	And so all of the content that we created on HackASAT, as well as all of the videos that
320790	325470	were created, are available on our GitHub page and our YouTube channel,
325470	329990	and where you can access that information and continue to learn about hacking, cyber, and space.
336410	340930	The scenario was based around a mock stolen satellite.
340930	345130	Once the teams were on the satellite, the remaining challenges had to do with removing
345130	350670	the presence of the malicious actor that was on that satellite, orient it so that they could then
350670	355810	use the imager to take a photo of the moon that we had set up inside of the facility where the
355810	362050	flatsats were all located. The other part of the challenge, the teams were tasked with coming up
362050	367510	with a command set that would point an actual satellite at the actual moon. Teams were given
367630	372590	a very limited amount of time to accomplish that goal, and one of them was able to successfully
372590	377390	take a photo of the moon using that command set. We're going to answer the question as to which
377390	383010	team had their code sent into space tonight. Congrats to Team Poland Can into Space for
383010	388590	submitting not only the best solution overall throughout the whole evaluation period, but the
388590	393150	solution that is going to space. We expect the moonshot to happen in a couple of hours at 630
393150	399150	pacific, and that picture will be sent down to earth at about 1am pacific. There will be people
399150	404450	who are hacking satellites, and so by having the federal government structure this in a nice,
404450	409530	organized, and safe way, we can do it without getting in any trouble, and they can get the
409530	414270	results and the understanding that they need from an attacker's perspective. Having the ability to
414270	418910	approach something with the mindset of, you know, how could I break this, always helps you understand
418910	424430	how a system works better. It's something we all as a community have to be thinking about.
424690	429570	And the security community wants to be a part of that. They would like to be involved with
429570	434470	these systems, would like to secure these systems, would like to learn more about these systems,
434470	441370	so openness and transparency, and getting access to more of these systems going forward.
441650	445930	And we need the space community, the aerospace community, to be open and available
445930	451350	and receptive to that. And that's what we were trying to accomplish with Hack-A-Sat, put on a
451350	455530	game that brought those two communities together and raised that awareness. And I think we did a
455530	462950	good job of that. Now we hand the ball off, maybe, to the aerospace community to take that over.
462950	468430	So the direction I think we're going, that we ought to go, is fully embracing the hacker
468430	474790	community at DEFCON, and not waiting till systems are built to create opportunities to learn and
474790	481110	help us learn, help us make them more secure before we're producing them. The systems we build
481110	485690	are unique. They have some pretty amazing technology in them, and I think the opportunity
485690	491750	for the hacker community to get new hands-on experience would also be really energizing and
491750	498350	cool. So events like Hack-A-Sat are awesome live events, but the relationship and continuing it
498350	503650	across a broader set of opportunities is what's more exciting. A year ago, hacking a satellite
503650	511250	felt pretty hard, but we're there now. You know, we aren't what you expect, and we do really, really
511250	520410	cool things. Last thing, thanks for joining us. The future of space security depends on the work
520410	522050	we're doing together.