Short: Unencrypted Flying Objects: Security Lessons from University Small Satellite Developers and Their Code

Small satellites face unique security challenges, especially when built by budget-constrained university teams with limited security expertise. To understand barriers to secure satellite design, we interviewed 8 members across 4 U.S. university clubs and audited 3 codebases. We found widely varying security practices and vulnerabilities exploitable by ground-based attackers in all projects. Participants foresee many risks of unsecured small satellites and indicate security shortcomings in industry and government. We conclude with practical recommendations for improving small satellite security in amateur organizations and beyond.