Publication: enisa-stl-2025-03 Space Threat Landscape
Full text
The control text is third-party content; see the official source for the full wording.
Mapped SPARTA techniques
8 techniques
Process-ID whitelisting (only a limited list of IDs allowed to communicate with bus and payload firmware) is the canonical whitelist whose modification DE-0006 attempts.
Process-ID whitelisting for bus and payload firmware commanding restricts which IDs can issue the memory-write/load and table-edit commands EX-0012 abuses.
Process-ID whitelisting for satellite-bus and payload-firmware commanding restricts which IDs can issue arbitrary memory writes.
Process-ID whitelisting for satellite-bus commanding restricts the IDs allowed to issue propulsion commands.
Process-ID whitelisting restricts which IDs can issue ADCS commands at the bus interface.
Process-ID whitelisting on the satellite bus is the canonical defense against unauthorised C&DH modifications.
Process-ID whitelisting on the satellite bus restricts which IDs can publish to subscriber topics, defeating spoofed publishers.
Process-ID whitelisting on the satellite bus restricts which IDs can publish, defeating spoofed messages attempting to leverage broadcast semantics.