LEO Satellite Time-varying Bottleneck Attacks

Time-varying Bottleneck Links in LEO Satellite Networks: Identification, Exploits, and Countermeasures

· 1 min · 330 words

topic/papercomputer science/securitycomputer science/networking

Paper Summary | NDSS 2025 | Generated by Hermes Agent

Executive Summary: This paper performs the first security analysis of time-varying bottlenecks unique to Low-Earth Orbit (LEO) satellite networks like Starlink. As satellites move at ~7.8 km/s, the bottleneck link between a ground station and the constellation changes every few seconds — creating predictable patterns that attackers can identify, exploit (DoS, traffic manipulation), and that require novel countermeasures.

1. High-Level Overview

LEO constellations (Starlink, OneWeb, Project Kuiper) are reshaping global Internet access. Unlike terrestrial networks where bottlenecks are relatively static, LEO networks have time-varying bottlenecks because:

  • Each satellite is only visible for ~5-10 minutes
  • Ground station handovers occur every few seconds
  • Different satellites have different capacities and congestion levels

2. Three-Step Study

Step 1: Profile

  • Characterize spatial and temporal patterns of time-varying bottlenecks in real LEO constellations
  • Model how satellite orbital mechanics create predictable bottleneck patterns

Step 2: Exploit

  • DoS attacks: time attack bursts to coincide with bottleneck periods → maximize damage
  • Traffic manipulation: predict when a target’s traffic will be congested and exploit the window
  • Side-channel: bottleneck timing leaks information about target’s satellite assignment

Step 3: Countermeasures

  • Bottleneck-aware routing and load balancing
  • Traffic smoothing across handover boundaries
  • Proactive capacity reservation

3. Key Findings

  1. LEO bottleneck patterns are predictable from public orbital data (TLE)
  2. Attackers can amplify DoS impact by targeting bottleneck windows
  3. Current LEO routing protocols don’t account for security implications of time-varying topology
  4. Countermeasures require cross-layer coordination (physical + network)

4. TL;DR

LEO satellite networks have predictable time-varying bottlenecks due to orbital mechanics. Attackers can exploit these patterns to amplify DoS attacks and manipulate traffic. Novel countermeasures needed.

Sources

  1. Authors: Yangtao Deng, Qian Wu, Zeqi Lai, Chenwei Gu, Hewu Li, Yuanjie Li, Jun Liu — Tsinghua University