Course overview
Defensive Space Operations teaches space system security fundamentals through the lens of catastrophic failure. Students inherit a space mission where every security decision was wrong or never made at all. No network segmentation. Default credentials. Unencrypted command links. No logging. No access controls. The mission has been thoroughly compromised, and students must understand exactly how and why before building it back correctly.
This isn’t theory. You will analyze a fully compromised space system, trace how attackers moved through every segment, and see firsthand the consequences of missing controls. Then you’ll systematically rebuild, implementing the security fundamentals that should have existed from day one, creating a hardened baseline that can withstand the attacks that just succeeded.
Every vulnerability and countermeasure maps to SPARTA (Space Attack Research and Tactic Analysis) from The Aerospace Corporation. Students learn to recognize what’s missing, understand the consequences, and implement appropriate controls across ground, link, and space segments.
Delivery formats
Online + virtual labs
Live instruction combined with cloud-hosted lab environments. Students work in a pre-compromised space mission environment, analyzing the damage, understanding the failures, and systematically implementing the security controls that should have existed. Persistent lab access throughout the course.
In-person + hardware labs
Available on request. The defensive curriculum benefits from live discussion and instructor access; where hardware is desirable — usually alongside offensive training — we can deliver in-person.
- Security engineers responsible for space system architecture and hardening
- Mission assurance engineers building security into space programs
- Systems engineers designing ground and space segment infrastructure
- Security architects establishing baselines for space operations
- Security operations personnel who need to understand what they are protecting
- Program managers making security investment decisions for space missions
- Military and government personnel responsible for space asset protection
- Space systems familiarity — spacecraft, ground segment, mission operations
- Orbital mechanics basics — orbital elements, TLEs, spacecraft dynamics
- Linux command line proficiency
- Networking fundamentals — TCP/IP, common protocols, traffic analysis
- Security foundations — defensive security concepts and common controls
- Recommended: complete Foundations in Space Cybersecurity first
Upon completion, students will be able to:
- 01 Identify security gaps across all space system segments through compromise analysis
- 02 Map vulnerabilities and countermeasures to the SPARTA framework
- 03 Understand attack progression and impact when security controls are absent
- 04 Design and implement network segmentation for ground infrastructure
- 05 Establish authentication and access control for space operations
- 06 Implement encryption and authentication for command and telemetry links
- 07 Configure logging and monitoring for security visibility
- 08 Harden ground segment systems against common attack vectors
- 09 Develop security baselines appropriate for space mission environments
- 10 Prioritize security investments based on attack impact analysis
Module 1 · Inheriting a Disaster
- Scenario introduction: a space mission with no security
- Attack timeline: how adversaries moved from internet to spacecraft
- Impact assessment: what was lost, what was compromised, what is at risk
- SPARTA mapping: identifying which techniques succeeded and why
- Lab: Exploring the compromised environment
Module 2 · Ground Segment Failures & Fixes
- What went wrong: flat networks, default credentials, unpatched systems
- Attack walkthrough: lateral movement through mission control
- Fundamentals: network segmentation and architecture
- Fundamentals: authentication, access control, privilege management
- Fundamentals: patch management and configuration baselines
- Lab: Rebuilding ground segment security architecture
Module 3 · Link Segment Failures & Fixes
- What went wrong: unencrypted commands, no authentication, no integrity checks
- Attack walkthrough: command injection and telemetry manipulation
- Fundamentals: encryption for command uplinks and telemetry downlinks
- Fundamentals: authentication and integrity verification
- Fundamentals: link monitoring and anomaly detection
- Lab: Implementing secure communications
Module 4 · Visibility Failures & Fixes
- What went wrong: no logging, no monitoring, no detection capability
- Attack walkthrough: how adversaries operated undetected for months
- Fundamentals: log architecture for space operations
- Fundamentals: security monitoring and alerting
- Fundamentals: telemetry analysis for anomaly detection
- SPARTA-mapped detection strategies
- Lab: Building security visibility from zero
Module 5 · Operational Security Failures & Fixes
- What went wrong: no procedures, no training, no incident preparation
- Attack walkthrough: social engineering and insider threat vectors
- Fundamentals: security procedures for mission operations
- Fundamentals: personnel security and access management
- Fundamentals: incident response preparation
- Fundamentals: supply chain security considerations
- Lab: Developing operational security procedures
Module 6 · Building the Secure Baseline
- Integrating controls into a cohesive security architecture
- Defense-in-depth for space missions
- Security baseline documentation and standards
- Validation: testing controls against known attack patterns
- Prioritization: security investments based on impact analysis
- Continuous improvement and security lifecycle
- Lab: Baseline validation and gap assessment
Module 7 · Capstone Exercise (optional add-on)
- New mission scenario: apply lessons learned to design security from scratch
- Architecture development and baseline creation
- Validation against a simulated attack campaign
- Briefing development: presenting security recommendations to leadership
- Adds a fourth day to the course
Instead of abstract best practices, you see exactly what happens when controls are missing. The compromised environment makes every security fundamental concrete and memorable.
The course arc takes you from complete disaster to defensible architecture. You don't just learn what to do — you understand why it matters, because you've seen the alternative.
Vulnerabilities and countermeasures align with SPARTA, giving you a structured framework for identifying gaps and selecting appropriate controls.
The lab environments reflect real attack patterns and realistic consequences — not sanitized examples, but the kind of damage actual adversaries inflict on unprotected systems.
You implement real controls in realistic environments. The labs progress from analyzing compromise to building working security architecture.
Defensive Space Operations is delivered privately to teams and organizations — no public open enrollment. Reach out with a rough sense of your team size, timeline, and whether you'd like the standard curriculum or a version tailored to your own mission profile.