Publication: enisa-stl-2025-03 Space Threat Landscape
Full text
The control text is third-party content; see the official source for the full wording.
Mapped SPARTA techniques
11 techniques
Critical-telemetry-points monitoring synchronised with ground-based defensive cyber operations is the named control for surfacing telemetry disruption and deception.
Critical-telemetry-points monitoring detects suppression at the source by tracking expected telemetry rates against ground reception.
Critical-telemetry-points monitoring of command counters (the literal subject) flags VCC freezing or selective decrement.
Critical-telemetry-points monitoring explicitly covers rejected-command counters; suppression or forging of this counter is the named target.
Critical-telemetry-points monitoring covers receiver AGC/RSSI as a defined telemetry point flagging anomalies.
Critical-telemetry-points monitoring of command-lock indicators flags abuse to validate geometry/credentials before final injection.
Critical-telemetry-points monitoring on the telemetered ephemeris flags sudden changes consistent with spoofing — explicitly suggested in the SPARTA description.
Critical-telemetry-points monitoring including command counters and error counters surfaces the SEU rate and watchdog/error patterns that signal EX-0007 stimulation.
Critical-telemetry-points monitoring for command counters and command-modes detects abusive valid-command volume.
Critical-telemetry-points monitoring covers carrier configuration and modulation parameters as defined points where unauthorised changes are flagged.
Critical-telemetry-points monitoring for valid/processed and rejected commands surfaces unusual commanding patterns even when origin appears valid.