COMPREHENSIVE SECURITY FRAMEWORK FOR COPERNICUS: FREE & OPEN DATA ACCESS TNC15 - Porto (Portugal), 17/06/2015 ESA EOP-G Network and Security team Barbara Angelucci, RHEA System SA CISSP, ISO27001 LA

Agenda The Copernicus context The approach Project lifecycle management Conclusions The Copernicus context The Security Framework

The Copernicus Programme A European system for monitoring the Earth for the establishment of a European capacity to access key environmental data on a routine basis for EO for the establishment of a European capacity to access key environmental data on a routine basis for EO Provides the necessary data for operational monitoring of the environment and for civil security Provides the necessary data for operational monitoring of the environment and for civil security ESA coordinates the Space Component Space Component In-Situ Component Services Component

Copernicus: the Service component Land monitoring Marine environment monitoring AtmospheremonitoringAtmospheremonitoring Emergency management Space Infrastructure In Situ Infrastructure SecuritySecurity Climate change USERS OBSERVATION

Copernicus Service Component TT&C Stations Acquisition Stations Collaborative Ground Segment Collaborative Centre A CSC Core Ground Segment GCM GS Contributing Missions Collaborative Centre A Users EDRS Copernicus: the Space component Dedicated Missions CSC Coordinated Data Access

Agenda The Copernicus context The approach Project lifecycle management Conclusions The Security Framework The approach

Copernicus Data Policy: policy and objectives The data policy Grant f ff full, free and open access, subject to specific limitations like: a.licensing conditions b.security interests and external relations of the Union or its Member States c.risk of disruption of the Copernicus infrastructure d.ensuring reliable access The service objectives Ensure access Ensure access to information:  in case of emergency and critical situation  delivered accurately and reliably  granted in a sustainable manner

The challenge Complex Complex: Seamless service and infrastructure Several missions Different industries Multiple contracts Different actors Dynamic Dynamic: New and evolving requirements New satellites Real time data

A twofold perspective Technical Management CSC Security Framework CSC Security Framework Standards Best practices Standards Best practices EC Data Policy CSC Security objectives EC Data Policy CSC Security objectives Risks Copernicus objectives CSC Security Framework CSC Security Framework

Agenda The Copernicus context The approach Project lifecycle management Conclusions The Security Framework The Security framework

The Copernicus Security Framework Security requirements Secure operations management SystemsSystems Network policy Data classification User classification Access control ApplicationsApplications Security organization SECOPSSECOPS

Security requirements Systems and applications security 1.Operating systems hardening 2.Mandatory and periodic security patching process for OS and applications 3.Secure coding practices according to best industry practices and standards 4.A strategy to adapt the system to operating system and hardware evolutions to prevent risks deriving from system obsolescence, 5.Logical three-tier architecture model (presentation, application and data tier) 6.Data and user I/O to applications are validated in terms of syntactic and semantics checks 7.System security portal

Security requirements Network Security - Implementation Policy Different security level External Networks Demilitarized Zones (DMZs) Internal Networks Central security services Antivirus/antispam Proxy Mail relay DNS/NTP Network security measures Firewall IDP DDoS defense

Security Services Network Security - The Defence Perimeter Early Warning DDOS Ctrl FWs +IDPS Ctrl Services Loc. FW+IDPS PDGS Systems Redundant central firewalls to enforce the EU/ESA security policies Redundant DDoS self-learning detection and mitigation IDS/IPS detection and blocking Central events correlation service Redundant Proxies Peripheral firewalls with local IPS/IDS ACLs and Iptables

Security requirements Access control, user and data classification ESA Unclassified - For Official Use ESA Unclassified - For Internal Use ESA Unclassified - Proprietary Information …… AuthenticationAuthorizationAccountingStorageEncryption AdministratorsOperators End users SystemsManagers

Secure operations and management

Agenda The Copernicus context The approach Project lifecycle management Conclusions The Security Framework Project lifecycle management

Copernicus Security within the Project lifecycle: for each project …..

…. each single function …

…. and End to end

Agenda The Copernicus context The approach Project lifecycle management Conclusions The Security Framework Conclusions

Facts and figures 11 centres and 2 data centres successfully deployed 3 PDGS successfully integrated over the 11 centres more than 1200 operational servers (between physical and virtual), 75 of which on the DMZ; more than 100 custom- developed applications; more than 260 TB data Circulated and disseminated / Month for Sentinel 1A more than 40 different data classes; several hundreds of users more than 40 security devices monitored on a daily basis; unauthorised requests blocked by first defence perimeter; security events blocked by the second defence layer

Conclusions Security Domains

Important Dates: Deadline for abstract submission16 October 2015 Notification of AcceptancesEnd January 2016 Issue of Preliminary ProgrammeFebruary 2016 Opening of Registration to the SymposiumFebruary 2016 Release of the Final Programme at the symposium Submission of Full Papers at the symposium Themes: Atmosphere, Oceanography, Cryosphere, Land, Hazards, Climate and Meteorology, Solid Earth/Geodesy, Near-Earth Environment, Methodologies and Products, Open Science PRAGUE MAY 2016 Main Objective: Presentation of Exploitation Results based on ESA Earth Observation Measurements