App/Subscriber Tables

Description

In publish/subscribe flight frameworks, applications and subsystems register interest in specific message classes via subscriber (or application) tables. These tables map message IDs/topics to subscribers, define delivery pipes/queues, and often include filters, priorities, and rate limits. By altering these mappings, an adversary can quietly reshape information flow: critical consumers stop receiving health or sensor messages; non-critical tasks get flooded; handlers are rebound so an opcode or message ID reaches the wrong task; or duplicates create feedback loops that consume bandwidth and CPU. Because subscription state is usually read at init or refreshed on command, subtle edits can persist across reboots or take effect at predictable times. Similar effects appear in legacy MIL-STD-1553 deployments by modifying Remote Terminal (RT), subaddress, or mode-code configurations so that messages are misaddressed or dropped at the bus interface. The net result is control-by-misdirection: the software still “works,” but the right data no longer reaches the right recipient at the right time.

Mappings

EU regulation articles

craAnnex I, Part I, (2)(f)
addresses
high
derived
Integrity protection on subscriber tables resists modification of message-ID-to-subscriber mappings.
eu-space-actArt. 84(2)
addresses
moderate
direct
App/subscriber tables in pub/sub flight frameworks are network-and-information-system state under 84(2) — Annex VII point 5.1 includes integrity protection on subscription bindings.
nis2Art. 21(2)(i)
addresses
moderate
direct
Subscriber/application tables and 1553 RT/subaddress configurations are access-controlled configuration assets; Art. 21(2)(i)'s access-control + asset-management obligation governs the edits that reshape who hears what and when.
nis2-implAnnex 6.3.1
addresses
moderate
derived
Configuration-management obligations cover application and subscriber tables as part of the documented configuration baseline whose deviations must be detected and reviewed.
nis2-implAnnex 6.4.1
addresses
moderate
derived
App/subscriber table modifications are configuration changes; change-management procedures govern release, modification and emergency edits to these tables.

ENISA controls

ENISA-STL-2025-03-sD.21-i01
addresses
high
Application/subscriber tables are configuration items under configuration management; modifications outside the baseline are flagged.
ENISA-STL-2025-03-sD.25-i10
mitigates
moderate
Integrity checking on tables and configuration data detects unauthorised modifications to subscriber lists.

Cross-reference controls

csf-2-0DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events
addresses
moderate
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against SI-7 Software, Firmware, and Information Integrity, and CSF 2.0's own crosswalk names that control as an informative reference for DE.CM-09. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0032 On-board Intrusion Detection & Prevention; CM0042 Robust Fault Management, and that countermeasure's own CSF references include DE.CM-09. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. DE.CM-09 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.
csf-2-0PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties
addresses
moderate
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.AA-05. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0038 Segmentation; CM0039 Least Privilege, and that countermeasure's own CSF references include PR.AA-05. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.AA-05 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.
csf-2-0PR.DS-10 The confidentiality, integrity, and availability of data-in-use are protected
addresses
moderate
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against AC-3 Access Enforcement; SI-7 Software, Firmware, and Information Integrity, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-10. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0039 Least Privilege, and that countermeasure's own CSF references include PR.DS-10. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.DS-10 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.
csf-2-0PR.IR-01 Networks and environments are protected from unauthorized logical access and usage
addresses
moderate
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.
csf-2-0PR.PS-01 Configuration management practices are established and applied
addresses
moderate
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.
d3fendD3-FEV File Eviction
addresses
moderate
Derived by composition, not from a source that names this pair. D3FEND publishes that File Eviction counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.04 as addressing that same adversary behaviour in the space domain. Deleting an unauthorised file from storage applies to on-board file stores and table areas as well as to ground hosts. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.
d3fendD3-FIM File Integrity Monitoring
mitigates
moderate
Derived by composition, not from a source that names this pair. D3FEND publishes that File Integrity Monitoring counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.04 as addressing that same adversary behaviour in the space domain. Detecting unexpected changes to stored files is the on-board table, parameter, and image integrity check, and is one of the few D3FEND controls that transfers to the spacecraft without reinterpretation. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.
d3fendD3-RF Restore File
addresses
moderate
Derived by composition, not from a source that names this pair. D3FEND publishes that Restore File counters T1565.001 Stored Data Manipulation; SafeMode's curated mapping records EX-0012.04 as addressing that same adversary behaviour in the space domain. Restoring a file from a known-good copy covers reloading an on-board table, image, or stored product. Recorded at moderate confidence because the supporting chain is two documented edges rather than one source attesting the pair directly.
mitre-attack-enterpriseT1565.001 Stored Data Manipulation
addresses
moderate
App/subscriber tables (cFS publisher-subscriber routing, message bus subscription lists) are stored configuration; tampering with them is T1565.001 'Stored Data Manipulation' applied to the FSW middleware layer.
mitre-attack-icsT0836 Modify Parameter
addresses
moderate
App/subscriber tables (cFS publisher-subscriber routing, message bus subscription lists) are parameter-shaped configuration; T0836 'Modify Parameter' covers their manipulation at cross-tactic moderate level.
nist-80053-rev5AC-2 Account Management
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-3 Access Enforcement
mitigates
high
AC-3 mitigates EX-0012.04 by enforcing access authorization on subscriber-table modifications.
nist-80053-rev5AC-3(13)Attribute-based Access Control
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-3(15)Discretionary and Mandatory Access Control
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4 Information Flow Enforcement
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(14)Security or Privacy Policy Filter Constraints
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(2)Processing Domains
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(24)Internal Normalized Format
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(26)Audit Filtering Actions
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(31)Failed Content Transfer Prevention
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(32)Process Requirements for Information Transfer
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-4(6)Metadata
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AC-6 Least Privilege
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-14 Session Audit
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-2 Event Logging
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-3 Content of Audit Records
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-3(1)Additional Audit Information
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-4 Audit Log Storage Capacity
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-4(1)Transfer to Alternate Storage
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-5 Response to Audit Logging Process Failures
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-5(2)Real-time Alerts
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-5(5)Alternate Audit Logging Capability
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-6(1)Automated Process Integration
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-6(4)Central Review and Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-8 Time Stamps
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-9 Protection of Audit Information
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-9(2)Store on Separate Physical Systems or Components
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5AU-9(3)Cryptographic Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CA-3 Information Exchange
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CA-3(6)Transfer Authorizations
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CA-3(7)Transitive Information Exchanges
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CA-7(6)Automation Support for Monitoring
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CM-11 User-installed Software
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CM-11(3)Automated Enforcement and Monitoring
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CM-5 Access Restrictions for Change
mitigates
moderate
CM-5 mitigates EX-0012.04 by gating subscriber-table changes behind change controls.
nist-80053-rev5CM-7 Least Functionality
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CM-7(5)Authorized Software — Allow-by-exception
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CM-7(8)Binary or Machine Executable Code
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-10 System Recovery and Reconstitution
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-10(4)Restore Within Time Period
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-12 Safe Mode
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-2 Contingency Plan
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-2(5)Continue Mission and Business Functions
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5CP-4(5)Self-challenge
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-3 Incident Response Testing
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-3(1)Automated Testing
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-3(2)Coordination with Related Plans
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4 Incident Handling
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4(11)Integrated Incident Response Team
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4(12)Malicious Code and Forensic Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4(14)Security Operations Center
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4(3)Continuity of Operations
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-4(5)Automatic Disabling of System
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-5 Incident Monitoring
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5IR-5(1)Automated Tracking, Data Collection, and Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PE-10 Emergency Shutoff
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PE-11 Emergency Power
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PE-11(1)Alternate Power Supply — Minimal Operational Capability
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PE-14 Environmental Controls
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PL-8 Security and Privacy Architectures
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5PL-8(1)Defense in Depth
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5RA-10 Threat Hunting
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5RA-3(4)Predictive Cyber Analytics
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-17(7)Structure for Least Privilege
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-3 System Development Life Cycle
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-4(5)System, Component, and Service Configurations
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-4(9)Functions, Ports, Protocols, and Services in Use
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8 Security and Privacy Engineering Principles
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(10)Hierarchical Trust
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(12)Hierarchical Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(13)Minimized Security Elements
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(14)Least Privilege
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(15)Predicate Permission
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(18)Trusted Communications Channels
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(19)Continuous Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(21)Self-analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(22)Accountability and Traceability
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(23)Secure Defaults
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(24)Secure Failure and Recovery
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(26)Performance Security
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(3)Modularity and Layering
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(30)Procedural Rigor
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(4)Partially Ordered Dependencies
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SA-8(9)Trusted Components
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-16(2)Anti-spoofing Mechanisms
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-16(3)Cryptographic Binding
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-2(2)Disassociability
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-24 Fail in Known State
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-3 Security Function Isolation
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-3(4)Module Coupling and Cohesiveness
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-32 System Partitioning
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-32(1)Separate Physical Domains for Privileged Functions
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-39 Process Isolation
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-4 Information in Shared System Resources
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-49 Hardware-enforced Separation and Policy Enforcement
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-5 Denial-of-service Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-5(3)Detection and Monitoring
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-50 Software-enforced Separation and Policy Enforcement
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-6 Resource Availability
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(10)Prevent Exfiltration
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(20)Dynamic Isolation and Segregation
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(21)Isolation of System Components
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(29)Separate Subnets to Isolate Functions
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(5)Deny by Default — Allow by Exception
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SC-7(9)Restrict Threatening Outgoing Communications Traffic
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-10(5)Restrict Inputs to Trusted Sources and Approved Formats
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-10(6)Injection Prevention
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-11 Error Handling
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-13 Predictable Failure Prevention
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-13(4)Standby Component Installation and Notification
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-16 Memory Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-17 Fail-safe Procedures
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-3 Malicious Code Protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-3(10)Malicious Code Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-3(8)Detect Unauthorized Commands
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4 System Monitoring
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(1)System-wide Intrusion Detection System
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(10)Visibility of Encrypted Communications
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(11)Analyze Communications Traffic Anomalies
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(13)Analyze Traffic and Event Patterns
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(16)Correlate Monitoring Information
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(17)Integrated Situational Awareness
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(2)Automated Tools and Mechanisms for Real-time Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(23)Host-based Devices
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(24)Indicators of Compromise
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(25)Optimize Network Traffic Analysis
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(4)Inbound and Outbound Communications Traffic
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(5)System-generated Alerts
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-4(7)Automated Response to Suspicious Events
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-6 Security and Privacy Function Verification
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-7 Software, Firmware, and Information Integrity
addresses
moderate
SI-7 mitigates EX-0012.04 by detecting unauthorized changes to publish/subscribe table contents.
nist-80053-rev5SI-7(17)Runtime Application Self-protection
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-7(5)Automated Response to Integrity Violations
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
nist-80053-rev5SI-7(8)Auditing Capability for Significant Events
relates to
moderate
Referenced in: sparta-data
Mapped by SPARTA, not curated by SafeMode Space.
space-shieldT2054.001 Stored Data Manipulation
addresses
moderate
T2054.001 covers altering stored configuration tables — addresses EX-0012.04's editing of pub/sub application/subscriber tables and 1553 RT/subaddress configurations.

SPARTA countermeasures

CM0032 On-board Intrusion Detection & Prevention
Mapped by SPARTA, not curated by SafeMode Space.
CM0038 Segmentation
Mapped by SPARTA, not curated by SafeMode Space.
CM0039 Least Privilege
Mapped by SPARTA, not curated by SafeMode Space.
CM0042 Robust Fault Management
Mapped by SPARTA, not curated by SafeMode Space.
CM0044 Cyber-safe Mode
Mapped by SPARTA, not curated by SafeMode Space.
CM0069 Process White Listing
Mapped by SPARTA, not curated by SafeMode Space.

Cite as SafeMode Space, EX-0012.04 (SPARTA v3.2).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description