Compromise Ground Segment
Parent: T1584
Description
If a Ground System is located in a remote area with limited physical security controls, a physical violation of the site is possible. There should be authentication systems implemented that make difficult to use it without a proper authorization. (Citation: SRC013) (Citation: APT attack compromising Newsat infrastructure for months)
Mapped SPARTA techniques
4 techniques
T1584.001 'Compromise Ground Segment' is the resource-development framing of the same activity IA-0007 describes; the SPACE-SHIELD platform stores both the resource-development and initial-access perspectives, and IA-0007 covers both.
T1584.001 'Compromise Ground Segment' covers gaining and retaining control of an existing ground system — addresses PER-0003's long-lived presence in operator workstations, mission control software, and station control. SPACE-SHIELD has no ground-persistence-specific technique.
T1584.001 'Compromise Ground Segment' is the direct counterpart of RD-0002.01 Mission-Operated Ground System — both describe compromising mission-control ground infrastructure for follow-on attacks.
Compromising third-party ground networks (commercial GSaaS, hosted modems) is also Compromise Ground Segment in SPACE-SHIELD's framing — third-party scope is implicit in T1584.001.
Cite as SafeMode Space, space-shield T1584.001.