Mission-system malicious-code protection at entry/exit and on system components is the canonical defense against the introduction of executable logic to the vehicle.

Malware-protection mechanisms at endpoints and entry points intercept ransomware payloads before they execute on-board.

Malware protection at endpoint scan points intercepts crafted files on removable media before they trigger auto-ingest workflows.

Malware protection at entry/exit points is relevant to the delivery vectors RD-0004.01 selects among, countering eventual delivery rather than the resource-development selection step itself.

Mission-system update validation prior to deployment is the named defense against pre-positioned adversary payloads in update pipelines and ground file drops.