itu-r Series-SNG: Satellite News Gathering
Portable and transportable satellite earth station standards for newsgathering operations — where unsecured uplink transmission, shared satellite transponder access, and comms-on-the-move create distinct security challenges.
Official Scope
Study Group: SG4 — Satellite Services
Active Status: Ongoing
Defines technical and operational guidelines for Satellite News Gathering (SNG) using small, transportable earth stations (SNG/ENG vehicles, flyaway terminals). Covers frequency coordination, technical specifications for portable VSAT operation, and interference avoidance procedures for sporadic-use satellite access.
Tactical Security Significance
- Relevance: 🟡 Medium — Portable SATCOM Security, Uplink Signal Integrity, Comms-on-the-Move
- Key Security Concepts: SNG Uplink Authentication, Transponder Access Control, Signal Encryption for Field Operations, Interference from Rogue SNG Terminals
- Attack Surface: Unencrypted SNG contribution uplinks, shared satellite transponder access without origin verification, physically exposed portable terminals
Key Recommendations
| ITU Rec | Title | Security Domain | Cross-Reference |
|---|---|---|---|
| SNG.722 | Uniform technical standards for SNG | SNG Technical Interoperability | ITU-R BO.1784 |
| SNG.771 | Auxiliary coordination channels for SNG | SNG Signal Authentication Channel | ITU-R SF.1006 |
| SNG.1069 | Uniform technical standards for digital SNG | Digital SNG Encryption Standards | DVB-S2 (BO.1784) |
Security Mapping
Unencrypted SNG Uplink Interception
SNG contribution uplinks are often transmitted without link-layer encryption — broadcast content is considered "public" before it reaches the distribution network. However, pre-transmission raw feeds (journalists' unedited footage, sensitive interviews) may be intercepted at the satellite downlink level.
- Threat: A receive-only satellite dish aimed at the same transponder as an SNG uplink can capture the raw contribution feed before editorial processing — exposing unedited footage, interview subjects, or embedded metadata
- Mitigation: Apply DVB-S2 scrambling (SNG.1069 / BO.1784) with Conditional Access to all contribution uplinks carrying pre-editorial content; use point-to-point encryption (AES-256) for sensitive field transmissions; for high-risk environments, use encrypted IP-over-satellite (BISS-2 or IPsec-wrapped feeds)
Rogue SNG Terminal — Unauthorized Transponder Access
Satellite transponder access is managed via SNG.771 coordination channels and national frequency coordination procedures. A rogue SNG terminal that transmits on an unauthorized frequency can cause co-channel interference to other legitimate SNG or broadcast uplinks on the same transponder.
- Threat: A compromised or unconfigured SNG terminal transmits at incorrect frequency or polarization → interferes with legitimate broadcaster's contribution feed during live broadcast
- Mitigation: Satellite operators must enforce carrier monitoring on transponders; require uplink approval from transponder controller before terminal activates; implement EIRP monitoring to detect unauthorized transmissions within the transponder bandwidth
Physical Terminal Security — Comms on the Move
Portable SNG equipment operates in hostile, uncontrolled environments (conflict zones, disaster areas). Physical compromise of the terminal can expose satellite credentials, encryption keys, or enable unauthorized use.
- Threat: SNG flyaway terminal left unsecured in the field; attacker powers on unit and uses stored satellite modem credentials to transmit unauthorized content on the leased transponder
- Mitigation: Implement hardware-bound credentials (TPM or Secure Element) that cannot be extracted and reused; enforce physical tamper detection; require PIN/biometric to activate uplink capability; zeroize encryption keys on unauthorized access attempts
Operational Audit
- SNG Field Audit Checklist: Field security checklist for portable SNG terminal deployment, uplink security, and transponder coordination compliance.
!NOTE This series is part of the master Series Tracker.