Lateral Movement via common Avionics Bus
Description
This attack is performed against a part of the system via a physical bus shared with a compromised system. Unprotected bus can be used to extend an attack to uncompromised components. In example, if payload has access to main 1553 bus, a hosted payload attack is possible. Fault injection or Adversary-in-the-Middle (AiTM) can be done into the 1553 bus.
Mapped SPARTA techniques
1 techniques
T2016 'Lateral Movement via common Avionics Bus' is the exact title-and-scope cross-framework counterpart of LM-0002 — both describe exploitation of unprotected/shared bus to extend attacks to uncompromised components via forged identifiers, replays, or AiTM injection.
Cite as SafeMode Space, space-shield T2016.