Follow our Iran coverage

The emerging AI battlespace: Counter-AI threats to AI-powered satellite remote sensing analysis

By Jingjie He | May 13, 2026

Six Earth observation satellites comprising what researchers referred to as the “A-train satellite constellation” as of 2014. Public Domain image courtesy of NASA / JPL

The emerging AI battlespace: Counter-AI threats to AI-powered satellite remote sensing analysis

By Jingjie He | May 13, 2026

Loading...
References

Adhikari, A., Den Hollander, R., Tolios, I., van Bekkum, M., Bal, A., Hendriks, S., … & Raaijmakers, S. 2020. “Adversarial patch camouflage against aerial detection.” Artificial intelligence and machine learning in defense applications II, Vol. 11543, 77-86. SPIE

Ahmad, H., Tariq, A., Shehzad, A., Faheem, M. S., Shafiq, M., Rashid, I. A., … & Khaliq, Z. 2019. “Stealth technology: Methods and composite materials—A review.” Polymer Composites, 40(12), 4457-4472

Boehnlein, A., Diefenthaler, M., Sato, N., Schram, M., Ziegler, V., Fanelli, C., … & Pang, L. G. 2022. “Colloquium: Machine learning in nuclear physics.” Reviews of modern physics, 94(3), 031003

Brewer, E., Lin, J., & Runfola, D. 2022. “Susceptibility & defense of satellite image-trained convolutional networks to backdoor attacks.” Information Sciences, 603, 244-261

Brumfiel, G. 2022. “Trump tweeted an image from a spy satellite, declassified document shows.” NPR. November 18. https://www.npr.org/2022/11/18/1137474748/trump-tweeted-an-image-from-a-spy-satellite-declassified-document-shows

Braunegg, A., Chakraborty, A., Krumdick, M., Lape, N., Leary, S., Manville, K., … & Walmer, M. 2020. “Apricot: A dataset of physical adversarial attacks on object detection.” Computer Vision–ECCV 2020: 16th European Conference, Glasgow, UK, August 23–28, 2020, Proceedings, Part XXI 16, 35-50. Springer International Publishing

Burlaka, O. 2023. “Strange electromagnetic interference was detected over Crimea.” Universe Space Tech, November 27. https://universemagazine.com/en/strange-electromagnetic-interference-was-detected-over-crimea/

Caldwell, T. 2011. “Ethical hackers: putting on the white hat.” Network Security, 2011(7), 10-13.

Campbell, J. B., Wynne, R. H. & Thomas V. A. 2022. Introduction to remote sensing: sixth edition. NY: Guilford Press

Cornebise, J., Worrall, D., Farfour, M., & Marin, M. 2018. “Witnessing atrocities: quantifying villages destruction in Darfur with crowdsourcing and transfer learning.” Proc. AI for Social Good NeurIPS2018 Workshop, NeurIPS’18

Czaja, W., Fendley, N., Pekala, M., Ratto, C., & Wang, I. J. 2018, November. “Adversarial examples in remote sensing.” Proceedings of the 26th ACM SIGSPATIAL International Conference on Advances in Geographic Information Systems, 408-411. DOI: 10.1145/3274895.3274904

Dräger, N., Xu, Y., & Ghamisi, P. 2023. “Backdoor attacks for remote sensing data with wavelet transform.” IEEE Transactions on Geoscience and Remote Sensing

Du, A., Chen, B., Chin, T. J., Law, Y. W., Sasdelli, M., Rajasegaran, R., & Campbell, D. 2022. “Physical adversarial attacks on an aerial imagery object detector.” Proceedings of the IEEE/CVF Winter Conference on Applications of Computer Vision,1796-1806.

Duan, R., Ma, X., Wang, Y., Bailey, J., Qin, A. K., & Yang, Y. 2020. “Adversarial camouflage: Hiding physical-world attacks with natural styles.” Proceedings of the IEEE/CVF conference on computer vision and pattern recognition, 1000-1008

Feffer, M., Sinha, A., Deng, W. H., Lipton, Z. C., & Heidari, H. 2024. “Red-teaming for generative AI: Silver bullet or security theater?” Proceedings of the AAAI/ACM Conference on AI, Ethics, and Society, Vol. 7, 421-437

Fredrikson, M., Jha, S., & Ristenpart, T. 2015. “Model inversion attacks that exploit confidence information and basic countermeasures.” Proceedings of the 22nd ACM SIGSAC conference on computer and communications security,1322-1333

He, H., Zha, K., & Katabi, D. 2022. “Indiscriminate poisoning attacks on unsupervised contrastive learning.” arXiv preprint arXiv:2202.11202

Hoque, A., Islam, M. T., Azim, R., Singh, M. J., Mat, K., & Cho, M. 2019, July. “A new split pitch square shape metamaterial absorber for X band application.” 2019 6th International Conference on Space Science and Communication (IconSpace), 85-90. IEEE

Jagielski, M., Carlini, N., Berthelot, D., Kurakin, A., & Papernot, N. 2020. “High accuracy and high fidelity extraction of neural networks.” 29th USENIX security symposium (USENIX Security 20), 1345-1362

Janes. 2021. “Nuclear site under construction in Iran: Janes produces ground-breaking data-driven study in partnership with Stanford.” Janes, July 7. https://www.janes.com/osint-insights/defence-news/nuclear-site-under-construction-in-iran-janes-produces-ground-breaking-study-in-partnership-with-stanford

Jiang, B., Xie, Y., Hao, Z., Wang, X., Mallick, T., Su, W. J., … & Roth, D. 2024. “A Peek into Token Bias: Large Language Models Are Not Yet Genuine Reasoners.” arXiv preprint arXiv:2406.11050

Kumar, N., Dixit, A., Kumar, N., & Dixit, A. 2019. “Camouflage and stealth technology based on nanomaterials.” Nanotechnology for Defence Applications, 155-203

Liu, L., Wang, Y., Liu, G., Peng, K., & Wang, C. 2023. “Membership inference attacks against machine learning models via prediction sensitivity.” IEEE Transactions on Dependable and Secure Computing, Vol. 20, No. 3, 2341-2347

Mi, D., Zhang, Y., Zhang, L. Y., Hu, S., Zhong, Q., Yuan, H., & Pan, S. 2024. “Towards Model Extraction Attacks in GAN-Based Image Translation via Domain Shift Mitigation.” Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 38, No. 18, 19902-19910

Mirzadeh, I., Alizadeh, K., Shahrokhi, H., Tuzel, O., Bengio, S., & Farajtabar, M. 2024. “Gsm-symbolic: Understanding the limitations of mathematical reasoning in large language models.” arXiv preprint arXiv:2410.05229

Narla, A., Kuprel, B., Sarin, K., Novoa, R. & Ko, J. 2018. “Automated Classification of Skin Lesions: From Pixels to Practice.” Journal of Investigative Dermatology, 138, 2108-2110. DOI: 10.1016/j.jid.2018.06.175

Nasr, M., Shokri, R., & Houmansadr, A. 2019. “Comprehensive privacy analysis of deep learning: Passive and active white-box inference attacks against centralized and federated learning.” 2019 IEEE symposium on security and privacy,739-753

Palantir Technologies Inc. n.d. MetaConstellation. https://www.palantir.com/offerings/metaconstellation/

Papernot, N., McDaniel, P., Goodfellow, I., Jha, S., Celik, Z. B., & Swami, A. 2017. “Practical black-box attacks against machine learning.” Proceedings of the 2017 ACM on Asia conference on computer and communications security, 506-519

Patton, T., Lewis, J., Hanham, M., Dill, C., & Vaccaro, L. 2016. “Emerging satellites for non-proliferation and disarmament verification.” Vienna Center for Disarmament and Non-Proliferation

Shi, F., Chen, X., Misra, K., Scales, N., Dohan, D., Chi, E. H., … & Zhou, D. 2023. “Large language models can be easily distracted by irrelevant context.” International Conference on Machine Learning, ICML 2023, 23-29 July 2023, Honolulu, Hawaii, USA, volume 202 of Proceedings of Machine Learning Research, 31210–31227. PMLR

Shokri, R., Stronati, M., Song, C., & Shmatikov, V. 2017. “Membership inference attacks against machine learning models.” 2017 IEEE symposium on security and privacy, 3-18

Su, J., Vargas, D. V., & Sakurai, K. 2019. “One pixel attack for fooling deep neural networks.” IEEE Transactions on Evolutionary Computation, 23(5), 828-841

Sutton, H. I. 2023. “Russia’s powerful invisible defenses around sevastopol rendered visible.” Naval News, November 28.  https://www.navalnews.com/naval-news/2023/11/russias-powerful-invisible-defenses-around-sevastopol-rendered-visible/

Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. 2013. “Intriguing properties of neural networks.” arXiv preprint arXiv:1312.6199

Szyller, S., Duddu, V., Gröndahl, T., & Asokan, N. 2021. “Good Artists Copy, Great Artists Steal: Model Extraction Attacks Against Image Translation Models.” arXiv preprint arXiv: 2104.12623

Tramèr, F., Zhang, F., Juels, A., Reiter, M. K., & Ristenpart, T. 2016. “Stealing machine learning models via prediction {APIs}.” 25th USENIX security symposium (USENIX Security 16), 601-618

Vaidyanathan, K., & Danet, T. 2022, June. “Detecting trojans in satellite imagery AI applications.” Artificial Intelligence and Machine Learning for Multi-Domain Operations Applications IV, Vol. 12113, 100-108. SPIE

Webster, R. 2023. “A reproducible extraction of training images from diffusion models.” arXiv preprint arXiv:2305.08694.

Xu, Y., Du, B., & Zhang, L. 2021. “Self-attention context network: Addressing the threat of adversarial attacks for hyperspectral image classification.” IEEE Transactions on Image Processing, 30, 8671-8685. DOI: 10.1109/TIP.2021.3118977

Yao, S., Yu, D., Zhao, J., Shafran, I., Griffiths, T., Cao, Y., & Narasimhan, K. 2023. “Tree of thoughts: Deliberate problem solving with large language models.” Advances in neural information processing systems, 36, 11809-11822

Together, we make the world safer.

The Bulletin elevates expert voices above the noise. But as an independent nonprofit organization, our operations depend on the support of readers like you. Help us continue to deliver quality journalism that holds leaders accountable. Your support of our work at any level is important. In return, we promise our coverage will be understandable, influential, vigilant, solution-oriented, and fair-minded. Together we can make a difference.


Comments are closed.