ESA SPACE-SHIELD
T2004

Passive Interception (RF/Optical)

Description

An attacker tries to gain knowledge about which communication protocols are used and how, looking for manners to exploit them. This can be executed intercepting, recording, and analyzing the signal to extract as more information as possible on the communication protocols. For example, different protocols can apply SDLS security to a part of the services. Optical link can be used for satellite feeder and intersat links, for some special payloads, or for deep space communications (availability problem caused by clouds should be considered if the receiver is on the Earth). If the downlink signal is sent by a far spacecraft, the beam covers a large ground area on the Earth, and the possible scanning area is extended. Receiving a satellite signal is simple and cheap, various open-source projects exist, e.g., NyanSat. (Citation: SRC012) (Citation: SRC017) Standard/references: (Citation: SRC003) (Citation: SRC038)(Citation: ITU-R S.1428-1, Reference FSS earth-station radiation patterns for use in interference assessment involving non-GSO satellites in frequency bands between 10.7 GHz and 30 GHz)(Citation: SRC008)

Mapped SPARTA techniques

2 techniques

  • EXF-0003Signal InterceptionST0008
    addresses
    high

    T2004 'Passive Interception (RF/Optical)' covers intercepting/recording/analyzing space-link signals — direct match to EXF-0003's RF/optical reception within the antenna field of view.

  • REC-0005EavesdroppingST0001
    addresses
    high

    T2004 'Passive Interception (RF/Optical)' is the parent passive-collection technique in SPACE-SHIELD covering both RF and optical eavesdropping, directly aligning with REC-0005's broad scope.

Cite as SafeMode Space, space-shield T2004.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.