This report is the second of two parts commissioned by SmartSatCRC through the University of South Australia, seeking to enhance the state of the art in cyber-security solutions for Low Earth Orbit (LEO) space systems. The aim of this two-part series is to establish a Cyber-Jeopardy and Response (CY-JAR) Concept for ongoing development and subsequent deployment into the LEO space operational environment. The first part of the report provided an overview and analysis of the body of knowledge pertaining to the concept of the evil twin, and the supporting concepts of risk, resilience, and cyber-worthiness as a means of enhancing the security posture of LEO systems. This second part of the report provides a fully worked example of a cybersecurity solution, using a generic model of a LEO space system, as a precursor to the CY-JAR concept.

The two report parts will be combined and enhanced as a third deliverable to be provided for future publication (October 2021). The subsequent third report will constitute the final report, of both parts. Additional content and integration work will be conducted for deliverable three. Space systems frequently employ the concept of a digital twin to test engineering concepts in a simulated environment which replicates the functionality of the system in question. Digital twins can have different fidelity levels, designed for different purposes. This report introduces the concept of an ‘evil twin’ as a counterpart to the commonly utilised digital twin. The evil twin models and tests potential attacks by adversaries, to improve cyber-security outcomes. This approach builds upon the practice of threat modelling and red teaming, with the goal of enhancing the resilience of space systems and improving their survivability under cyberattack. The evil twin is more than just a penetration test or a red-team exercise; it is intended to be a comprehensive methodology which matches the utility of a traditional digital twin in the reduction of risk to space missions.