DEF CON 33 - Hacking Space to Defend It: Generating IoBs with SPARTA - Brandon Bailey

DEF CON 33 - Hacking Space to Defend It: Generating IoBs with SPARTA - Brandon Bailey

Source: YouTube · DEFCONConference · published Oct 10, 2025 · 25:38

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

The presentation introduces Sparta, a space-specific cybersecurity framework adapted from MITRE ATT&CK, and explains how Indicators of Behavior (IoBs) enable intrusion detection for spacecraft where traditional security monitoring is limited 0:40-1:43.

Key Takeaways:
• Sparta is a framework for space system cybersecurity that adapts MITRE ATT&CK for space vehicles, covering threats from electronic warfare to cyber attacks 0:40-1:43
• Indicators of Behavior (IoBs) are probabilistic, behavioral-based patterns designed specifically for spacecraft intrusion detection, complementing traditional IoCs 3:11-5:43
• The team developed approximately 200 IoBs across 10 categories ranging from anomalous commanding to data integrity 9:00-9:33
• Experiments using digital twins demonstrated that spacecraft intrusion detection is feasible with minimal system impact 11:01-14:30
• Detection alone is insufficient; autonomous response mechanisms are critical due to delayed telemetry feedback in spacecraft 21:38-23:00

Spacecraft cybersecurity requires specialized approaches due to unique operational constraints and the need for autonomous defensive capabilities.

Sources:

  • 0:40 Introduction to Sparta framework
  • 3:11 Explanation of Indicators of Behavior
  • 9:00 Categories of IoBs developed
  • 11:01 Testing through experiments
  • 21:38 Detection vs. mitigation challenge

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

All righty, 11:00. We got a lot of uh content to get through here. Appreciate you guys sticking it out till Sunday. I know there's a lot of people leaving, but definitely appreciate you coming out. Um, show hands real quick. Who has heard of Sparta? Okay, about half. Okay, that's good. So, you're going to learn a little bit about it and then we're going to get into something more specific. So, I'm going to go through the the first few slides pretty quick because I want to get to the important content. Um this is my bio. I did done a lot of pin testing and different things related to um security, a lot of NASA work and more so recently spacecraft cyber security. All right. So Sparta, what is it? Um I'm I would assume everyone in here has heard of MITER attack. It's been around 12 years. So …