<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Aptos;
panose-1:2 11 0 4 2 2 2 2 2 4;}
@font-face
{font-family:"Apple Color Emoji";
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:NotesEsa;
panose-1:2 11 6 4 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0in;
font-size:9.0pt;
font-family:"Times New Roman",serif;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Thanks Ignacio. I’m not surprised that you find the NIST SP 800-160 to be useful. I think it is too. That said, I do think it could be even better.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Whether you choose to use any of what I sent in your talk, if you, as one of our CCSDS Security experts, could make the time available I’d really like to get your feedback on those RASDS Security topics. This is really true for all of
the ADs, there is something in there for each of your areas. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This document will shortly come out for CESG review and it will need CESG approval. If there are issues about any of this I’d like to address them now.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks, and best regards, Peter<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="EN-GB" style="font-size:12.0pt;color:black;mso-ligatures:none">From:
</span></b><span lang="EN-GB" style="font-size:12.0pt;color:black;mso-ligatures:none">Ignacio Sanchez-Aguillar <Ignacio.Aguilar.Sanchez@esa.int><br>
<b>Date: </b>Tuesday, February 6, 2024 at 11:17 PM<br>
<b>To: </b>Peter Shames <peter.m.shames@jpl.nasa.gov>, CESG <cesg@mailman.ccsds.org><br>
<b>Cc: </b>Tom Gannett <thomas.gannett@tgannett.net><br>
<b>Subject: </b>RE: [EXTERNAL] [CESG] CYSAT 2024 - tutorial on CCSDS SDLS protocols<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-GB" style="mso-ligatures:none"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB">Thank you for your kind e-mail and the supporting material, Peter.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">About CYSAT, I believe Mathieu Bailly (promoter from CYSEC) is very enthusiastic about the whole subject. I got to know him before COVID when he approached ESA to enter the space business. However, not sure I would make
the claims he makes about the size and importance of the event </span><span lang="EN-GB" style="font-family:"Apple Color Emoji"">😊</span><span lang="EN-GB">. His target audience is mainly ‘new space’. My main goals are to continue raising awareness on space
system security and promote CCSDS standards.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">About the NIST document, I have been using and recommending it, already in its initial version a few years ago. For me it is probably right now one of the best references out there to assist system security engineers.
It might not be perfect, but I do not know of any other reference at a similar level on the subject.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Kind regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none">Ignacio</span><span lang="EN-GB" style="mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
<br>
</span><b><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Ignacio Aguilar Sánchez</span></b><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Communication Systems Engineer</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Electrical Engineering Department</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
<br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">European Space Research and Technology Centre<br>
Keplerlaan 1, PO Box 299, 2200 AG Noordwijk, The Netherlands<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Mob.+31641360257</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Fax +31715655418</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Email:
<a href="mailto:ignacio.aguilar.sanchez@esa.int"><span style="color:blue">ignacio.aguilar.sanchez@esa.int</span></a><br>
</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><a href="https://urldefense.us/v3/__http:/www.esa.int/__;!!PvBDto6Hs4WbVuu7!KO5gGc-r8f3sWLWU9U270--hUFHnAbQdpPM3_5t20Jy2Cm1Ydmjpzk6W7aCLwQlpIPAUSJ5bLmVmVfMyA7i0rg0sinErW3jN5Ng4$" target="_blank"><span style="font-size:10.0pt;font-family:NotesEsa;color:blue">www.esa.int</span></a></span><span lang="EN-GB" style="mso-ligatures:none"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="mso-ligatures:none">From:</span></b><span style="mso-ligatures:none"> Shames, Peter M (US 312B) <peter.m.shames@jpl.nasa.gov>
<br>
<b>Sent:</b> Tuesday, February 6, 2024 8:43 PM<br>
<b>To:</b> Ignacio Aguilar Sanchez <Ignacio.Aguilar.Sanchez@esa.int>; cesg@mailman.ccsds.org<br>
<b>Cc:</b> Thomas Gannett (thomas.gannett@tgannett.net) <thomas.gannett@tgannett.net><br>
<b>Subject:</b> Re: [EXTERNAL] [CESG] CYSAT 2024 - tutorial on CCSDS SDLS protocols<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Aptos",sans-serif">Hi Ignacio,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Aptos",sans-serif"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Aptos",sans-serif">Congratulations on getting their attention and being invited to give a tutorial. I think this is a great opportunity for you and for CCSDS. According to their site the focus is “</span>CYSAT
is the biggest worldwide event entirely dedicated to cybersecurity for commercial space applications.<span style="font-family:"Aptos",sans-serif">” I’m assuming that largely means near Earth and commercial, but maybe there is room to squeeze in civilian space,
exploration, and looking out to the Moon?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Aptos",sans-serif"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual">There’s a new-ish NIST standard, NIST SP800-160-v1r1, “Engineering Trustworthy Secure Systems” (</span><a href="https://urldefense.us/v3/__https:/doi.org/10.6028/NIST.SP.800-160v1r1__;!!PvBDto6Hs4WbVuu7!KO5gGc-r8f3sWLWU9U270--hUFHnAbQdpPM3_5t20Jy2Cm1Ydmjpzk6W7aCLwQlpIPAUSJ5bLmVmVfMyA7i0rg0sinErW0de7ahy$">https://doi.org/10.6028/NIST.SP.800-160v1r1</a><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual">).
After reading it I believed that they had missed some important points relating to all of the different viewpoints where cybersecurity needed to be addressed in architecting these systems. I created a PPT file based on our recent RASDS work, attached here,
that I sent to the lead author, Mark Winstead. He agreed that these materials offered some value and would be considered in an update. I’m attaching it here for your consideration since it provides a view of the environment within which SDLS has a direct
role.<o:p></o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual">Look for the main relevant viewpoints: functional, information, connectivity, protocol, and enterprise (pgs 14, 19, 25, 30, and 35)
and then look for the security topics pages associated with each viewpoint (pgs 17, 22, 28, 33, and 38).
<o:p></o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual">This may be of use (or not), but it is free of charge. ;-}<o:p></o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual">Cheers, Peter<o:p></o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<p class="p1"><span style="font-size:11.0pt;font-family:"Aptos",sans-serif;color:windowtext;mso-ligatures:standardcontextual"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="EN-GB" style="font-size:12.0pt;color:black;mso-ligatures:none">From:
</span></b><span lang="EN-GB" style="font-size:12.0pt;color:black;mso-ligatures:none">CESG <<a href="mailto:cesg-bounces@mailman.ccsds.org">cesg-bounces@mailman.ccsds.org</a>> on behalf of CESG <<a href="mailto:cesg@mailman.ccsds.org">cesg@mailman.ccsds.org</a>><br>
<b>Reply-To: </b>Ignacio Sanchez-Aguillar <<a href="mailto:Ignacio.Aguilar.Sanchez@esa.int">Ignacio.Aguilar.Sanchez@esa.int</a>><br>
<b>Date: </b>Tuesday, February 6, 2024 at 12:48 AM<br>
<b>To: </b>CESG <<a href="mailto:cesg@mailman.ccsds.org">cesg@mailman.ccsds.org</a>><br>
<b>Cc: </b>Tom Gannett <<a href="mailto:thomas.gannett@tgannett.net">thomas.gannett@tgannett.net</a>><br>
<b>Subject: </b>[EXTERNAL] [CESG] CYSAT 2024 - tutorial on CCSDS SDLS protocols<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Aptos",sans-serif;mso-ligatures:none"><o:p> </o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-GB">Dear colleagues,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">I would like to inform you that following a kind invitation from the CYSAT organisers (<a href="https://urldefense.us/v3/__https:/cysat.eu/about/__;!!PvBDto6Hs4WbVuu7!MFdY_7zt_-izCb23JScggshu5yLKKJvEoOABblY3PvVKxwU6JkF2KGgWuYjpsXXi-GAXx6sGSvAoLFkp_QfLFP39oKw$">https://cysat.eu/about/</a>),
I will be giving a tutorial on CCSDS SDLS protocols at their 2024 event.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><a href="https://urldefense.us/v3/__https:/cysat.eu/cysat-academy/__;!!PvBDto6Hs4WbVuu7!MFdY_7zt_-izCb23JScggshu5yLKKJvEoOABblY3PvVKxwU6JkF2KGgWuYjpsXXi-GAXx6sGSvAoLFkp_QfLGU7bAWY$">https://cysat.eu/cysat-academy/</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">This year CYSAT is also taking place in the US:
<a href="https://urldefense.us/v3/__https:/cysat.eu/cysat-usa/__;!!PvBDto6Hs4WbVuu7!MFdY_7zt_-izCb23JScggshu5yLKKJvEoOABblY3PvVKxwU6JkF2KGgWuYjpsXXi-GAXx6sGSvAoLFkp_QfLKXL4xjg$">
https://cysat.eu/cysat-usa/</a><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB">Kind regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none">Ignacio</span><span lang="EN-GB" style="mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
<br>
</span><b><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Ignacio Aguilar Sánchez</span></b><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Communication Systems Engineer</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Electrical Engineering Department</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
<br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">European Space Research and Technology Centre<br>
Keplerlaan 1, PO Box 299, 2200 AG Noordwijk, The Netherlands<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Mob.+31641360257</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Fax +31715655418</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><br>
</span><span lang="EN-GB" style="font-size:10.0pt;font-family:NotesEsa;color:#4F4F4F;mso-ligatures:none">Email:
<a href="mailto:ignacio.aguilar.sanchez@esa.int"><span style="color:blue">ignacio.aguilar.sanchez@esa.int</span></a><br>
</span><span lang="EN-GB" style="font-size:8.5pt;font-family:"Arial",sans-serif;color:black;mso-ligatures:none"><a href="https://urldefense.us/v3/__http:/www.esa.int/__;!!PvBDto6Hs4WbVuu7!MFdY_7zt_-izCb23JScggshu5yLKKJvEoOABblY3PvVKxwU6JkF2KGgWuYjpsXXi-GAXx6sGSvAoLFkp_QfLHnXs4kM$" target="_blank"><span style="font-size:10.0pt;font-family:NotesEsa;color:blue">www.esa.int</span></a></span><span lang="EN-GB" style="mso-ligatures:none"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="font-size:12.0pt;font-family:"Aptos",sans-serif;mso-ligatures:none">This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised
disclosure, use, retention or dissemination is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact
the ESA Data Protection Officer (<a href="mailto:dpo@esa.int">dpo@esa.int</a>). <o:p>
</o:p></span></p>
<p class="MsoNormal"><span lang="EN-GB" style="mso-ligatures:none">This message is intended only for the recipient(s) named above. It may contain proprietary information and/or protected content. Any unauthorised disclosure, use, retention or dissemination
is prohibited. If you have received this e-mail in error, please notify the sender immediately. ESA applies appropriate organisational measures to protect personal data, in case of data privacy queries, please contact the ESA Data Protection Officer (dpo@esa.int).
<o:p></o:p></span></p>
</div>
</body>
</html>