The original post: /r/cybersecurity by /u/BoldlySilent on 2024-10-06 19:23:19.
This could really be two posts so be kind if I should have done that instead, but I have two separate but semi-related questions.
- In recent years data classification advances in machine learning have been deployed to threat surveillance in network systems to great effect. These implementations, AFAIK, mostly use abundant computing, memory, power, and cooling resources whether they be local or cloud based. What I want to ask the crowd is what opportunities "tiny ML", or machine learning on resource constrained hardware, have for more localized threat detection. I sort of already see the value in something like an industrial control system, or a car, where you dont necessarily want to be streaming data to a cloud based service for analysis, but are there other non-obvious applications that are going to become important? How mature is this use of the technology?
- Second question is sort of related, but I have been trying to learn more about space-domain cyber risks and have actually had a hard time finding technical details on specific threat vectors to satellites. I could just be bad at searching, but so far all I have been able to find are some of the starlink ground-station examples like where that guy performed a fault injection on the ground terminal. What else is there? An example question is that most satellites have used MIL-STD-1553 data bus for a long time. What kinds of external threat vectors exist to that platform? Can someone for instance send up a signal at the same receiving frequency as the normal communications system and just upload a virus? What protections exist and are there any public examples of lessons learned with the technical details of the incidents?
The connection here being a future where small scale ML implementations are used for threat detection on satellites which are like the definition of resource constrained operating environments
Would love to hear some professional perspectives on this and of course appreciate the time
Edit: Wanted to make clear that I have seen a lot of media and content around space cyber threats, but have had a hard time with actual specific technical details about what that could mean or has meant in the past