Session Authenticity
Description
Protect the authenticity of communications sessions.
Mapped SPARTA techniques
89 techniques
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
SC-23 session authenticity is maintained across safe-mode, but DE-0005's defining vector is the broad relaxation of protections during safe-mode (contingency dictionaries, relaxed rate/size and timetag checks, alternate receivers, thinned downlink). Session authenticity is one of many properties safe-mode relaxes, not the dominant interdiction, so the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
EX-0008.01 is a dormant implant that fires at a programmed wall-clock time. SC-23 session authenticity of time distribution does not interdict a pre-planted implant reading a trusted clock and triggering at its programmed epoch; it covers a tangential slice, so the relationship is addresses.
EX-0011's defining vector is exploiting the broadly reduced guardrails of safe-mode (authentication, anti-replay, rate and size limits, and interlocks all differ). SC-23 session authenticity is one slice of those guardrails, not the dominant interdiction, so the relationship is addresses.
EX-0012.12 manipulates the system clock and time-distribution that SC-23 session authenticity itself depends on for anti-replay counters and timetag validation. SC-23 is downstream of the attacked time base, a victim not the defending control, so the relationship is addresses.
EX-0014 (parent Spoofing) is multi-modal data spoofing across bus, time, sensor, PNT, and ballistic paths (its sub-techniques EX-0014.01 through EX-0014.05). SC-23 session authenticity interdicts only the bus and session path; the sensor mode (data consumed below any session layer) and the GNSS mode (RF front-end signal spoofing) never pass through an authenticated session, so session authenticity covers a non-dominant slice of the parent's dominant scope. A parent cannot have tighter session-authenticity coverage than its most-session-oriented child EX-0014.02, which was itself downgraded, so the relationship is addresses.
EX-0014.01 forges the onboard time that SC-23 session authenticity relies on for sequencing, anti-replay, and timetag validation. SC-23 is downstream of the attacked time base, a victim not the defending control, so the relationship is addresses.
SC-23 session authenticity reaches bus spoofing only on protocols that support session-like semantics (sequence counters and MACs); EX-0014.02's dominant scope includes raw broadcast and latest-value-wins buses with no session layer, which session authenticity does not cover. A single non-dominant slice, so the relationship is addresses.
EX-0014.04 transmits GNSS-like signals so the navigation solution reflects attacker-chosen states. GNSS reception is a one-way broadcast with no session to authenticate, so SC-23 session authenticity does not reach the defining vector; this is a signal-domain technique, so the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
SC-23 mitigates IA-0004.02 by maintaining session authenticity protections on the backup receive path.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008.03's dominant scope is physical counterspace (electronic warfare, directed energy, kinetic). SC-23 session authenticity resists only the spoofed-signal substitution sub-vector; the dominant physical-counterspace scope is uncovered, so the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
IA-0010 times first execution to safe-mode, where authentication, anti-replay, and interlocks are relaxed. SC-23 session authenticity is one of the relaxed guardrails, not the dominant interdiction of the broad safe-mode access vector, so the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
IMP-0001 is broad deception via falsification of telemetry, mimicry of another actor's TTPs, and compromised-but-legitimate ground infrastructure used as the communications source. SC-23 session authenticity defeats only the fabricated-origin slice; a compromised-legitimate source passes session authenticity, so the dominant deception scope is uncovered and the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
REC-0005.01 is passive capture and traffic-analysis of the uplink command path. SC-23 session authenticity protects session integrity but provides no confidentiality against passive interception, which is the defining vector, so the relationship is addresses.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Mapped by SPARTA, not curated by SafeMode Space.
Cite as SafeMode Space, nist-80053-rev5 SC-23.