Security1 publisherNot yet confirmed elsewhere3 min readPublished
Viasat's resilience math turns formal methods into a procurement question
Atalanta is selling Argo on the strength of the satellite network Russia crippled in 2022. In the reporting, the math is attested by the vendor and its customer, and by nobody else.
The Watch · Security desk
What happened
- Atalanta has released Argo, the product containing the technology applied to Viasat's satellite communications network against emerging adversary attacks.
- Russia disabled thousands of satellite modems across Ukraine and other European countries on the day it invaded in 2022.
- The company calls the method software understanding, mathematics plus AI, and says it is the first commercially available system of its kind.
- The same technology has been tapped for the Energy Department's Genesis Mission on autonomous nuclear reactors.
- Idaho National Laboratory's chief cybersecurity scientist puts DARPA's spending on formal methods at well over $2 billion.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- precedent With one named operator able to hand over math alongside a hardening claim, buyers of satellite and embedded firmware can start asking rivals for the same document, and its absence becomes...
- contradiction The Pentagon wants this mathematics as a gold standard already, while a government lab scientist dates standard practice a decade or two out; operators are being sold at the front end of that gap.
- exposure Any operator or regulator leaning on the Viasat result inherits scoping decisions made between a vendor and its customer, with no third-party check described in the account.
- cost Two decades of public research money carried these methods to the point of sale; the packaged version is now a commercial purchase for the operators who need it.
Formal methods produce statements about specified properties of specified code under stated assumptions. That is a much narrower object than a hardened network, and the narrowness is where the buying decision sits. Viasat's chief of cyber strategy, Nick Saunders, says the work with Atalanta both hardens the network and produces the math that backs the claim up [4]. His description of what a year of joint work actually yielded is more careful: a capability where the company can "start to develop an understanding of how our systems are more resilient against attacks" [5]. Those two statements are not the same size, and a buyer who reads the first without the second will over-read what has been delivered.
Atalanta's own framing is broader still. Chief executive Anjana Rajan says older tools do not scale and that software understanding is the path forward for anyone building "a system of consequence" for the United States [14]. Demand for that pitch is not hypothetical: several government agencies warned this summer that Iranian hackers have been targeting water and wastewater systems and other critical infrastructure [9].
The public bill behind the product is worth pricing. Greg Shannon of Idaho National Laboratory attributes the spending to a couple of decades of DARPA programs [1]; divide it out and the taxpayer put on the order of $100 million a year into formal methods before any operator saw a commercial licence [10]. Shannon's own timeline for the result is unhurried. He expects this class of tooling to be part of standard development kits in a decade or two [7], which is a slower clock than the one the Pentagon's chief technology officer set when he said he wanted the underlying mathematics to be the department's gold standard [8].
Cross-domain reach is the part to hold lightly. Reactor autonomy and satellite modems share little beyond the fact that writing down what the system is supposed to do is the hard part. A proof travels only as far as its specification, so a vendor's engagement list is not evidence that any particular property holds in the next environment.
Which leaves the artifact itself. Nothing in the account describes anyone outside Atalanta and Viasat checking the proof [11], and the company's claim to be the first commercially available system of this kind is the company's claim [13]. A resilience statement a regulator or a prime contractor can use names the components analysed and the properties proved, and says what was assumed about everything else. Until a bid package asks for that, "proved resilient" is a reference-customer story, and the reference is the network Russia took down on the first day of the invasion [2].
What to watch
- Whether Atalanta or Viasat publishes the scope of what was proved: which components were analysed, which properties were established, and what was assumed.
- Whether any Defense Department or civil critical-infrastructure solicitation names formal-methods or software-understanding artifacts as a deliverable rather than a preference.
- Whether a second named commercial reference deployment appears outside satellite communications and Energy Department work.