Exploitation of clear mode (also known as safe mode)
Parent: T2008
Description
An attacker can exploit the TC channel if a spacecraft is in clear mode, e.g., during safe mode of operation. (Citation: European Space Agency) Standard/references: (Citation: SRC003) (Citation: SRC005) (Citation: SRC006) (Citation: SRC008) (Citation: SRC009) (Citation: SRC010)
Mapped SPARTA techniques
3 techniques
T2008.004 'Exploitation of clear mode (also known as safe mode)' is the direct cross-framework counterpart of DE-0005 — both describe attackers timing actions to safe-mode's broadened command acceptance and reduced visibility.
T2008.004 'Exploitation of clear mode (also known as safe mode)' is the direct cross-framework counterpart of EX-0011 — both describe attackers timing on-board actions to coincide with safe-mode's reduced authentication, relaxed counters, and broader command acceptance.
T2008.004 'Exploitation of clear mode (also known as safe mode)' is the direct cross-framework counterpart of IA-0010 — both describe attackers exploiting the spacecraft's clear/safe-mode operation to obtain initial access via the TC channel.
Cite as SafeMode Space, space-shield T2008.004.