Can the Moon Be DDoSed? Exploring Future Cybersecurity Challenges for Lunar Bases

Imagine a lunar base in 2036: a handful of astronauts, dozens of rovers, sensors, and automated systems all exchanging data across NASA’s planned LunaNet architecture. The original question posed by DDoS-Guard analysts is whether this infrastructure could be taken offline by a distributed denial-of-service attack launched from Earth.

The distance alone creates a 2.6-second round-trip latency, making conventional TCP/IP assumptions invalid. NASA therefore designed Delay/Disruption Tolerant Networking (DTN) that stores bundles at intermediate nodes until the next contact window appears. While this store-and-forward approach keeps data alive during eclipses or orbital hand-offs, it also creates new queues that an attacker could deliberately fill.

Attacking a single server inside a habitat module would produce only local effects. The real targets are the scarce orbital relays and Earth-Moon gateways whose bandwidth cannot be expanded by simply adding more terrestrial bots. A million compromised devices on Earth would still be throttled by the same 622 Mbit/s laser or radio link demonstrated during the Lunar Laser Communications Demonstration.

More sophisticated scenarios involve crafting low-volume but high-cost requests that force DTN nodes to perform expensive lookups, cryptographic checks, or persistent storage operations. Because every additional relay or antenna represents years of engineering and launch mass, there are few alternate paths when one node becomes saturated.

Ground-segment compromise remains the most practical vector. Command centers, telemetry servers, and mission-control networks on Earth use ordinary IP infrastructure and could be flooded with traffic generated by large botnets. Once those links are degraded, lunar assets lose remote oversight even if local systems continue to function.

The article stresses that any future lunar network will inherit familiar terrestrial problems—limited capacity, single points of failure, and the need for strict traffic prioritization—despite operating in an environment where mistakes carry far higher consequences.