HoneySat: Network-based Satellite Honeypot Framework

Feb 12, 2026 · 2 min read
projects

Overview

HoneySat is the first high-interaction satellite honeypot framework designed to convincingly simulate real-world CubeSats and SmallSats exposed over network interfaces. For years, satellite systems relied on security by obscurity under the assumption that indecipherable proprietary architectures provided sufficient protection. However, modern technological advancements have rendered these assumptions obsolete, opening up satellite communications to potential adversarial attacks.

HoneySat bridges the critical gap in space cybersecurity by capturing real-world satellite adversarial techniques and collecting threat intelligence to develop robust defensive countermeasures.

Technical Details

  • High-Interaction Simulation: Convincingly emulates the network interfaces, telemetry protocols, and command execution pipelines of operational CubeSats.
  • Hardware-in-the-Loop Integration: Validated through real-world hardware-in-the-loop operations successfully communicating with an operational in-orbit SmallSat mission.
  • Threat Intelligence Gathering: Deployed across the Internet to capture live adversarial behavior, collecting real-world interactions without risking active satellite assets.
  • Operator Validation: Evaluated with small-satellite operators, achieving a 90% realism rating among domain experts.

People Involved & Collaborators

  • Maintainers & Authors:

    • Efrén López-Morales (New Mexico State University)
    • Ulysse Planta (CISPA Helmholtz Center for Information Security)
    • Gabriele Marra (CISPA Helmholtz Center for Information Security)
    • Carlos Gonzalez-Cortes (SCY-FI Lab)
    • Jacob Hopkins (Texas A&M University - Corpus Christi)
    • Majid Garoosi (CISPA Helmholtz Center for Information Security)
    • Elías Obreque (Universidad de Chile)
    • Carlos Rubio-Medrano (Texas A&M University - Corpus Christi)
    • Ali Abbasi (CISPA Helmholtz Center for Information Security)
  • Collaborating Institutions:

    • CISPA (Helmholtz Center for Information Security)
    • New Mexico State University
    • Texas A&M University - Corpus Christi
    • SCY-FI Lab (Computer Engineering Department, Universidad de Santiago de Chile, USACH)
    • SPEL (Universidad de Chile)
Dr. Carlos Gonzalez-Cortes
Authors
Principal Investigator
Professor in the Computer Engineering Department at the University of Santiago of Chile (USACH). He holds a Ph.D. in Electrical Engineering from the University of Chile and has extensive experience in embedded systems, nanosatellites, and flight software. Previously, he developed the SUCHAI family and PlantSat nanosatellites at SPEL, and worked at the Flight Software Department of the German Aerospace Center (DLR). Carlos is passionate about pushing the boundaries of distributed space systems and satellite flight software architectures.