safemode.space
← All techniques
EX-0016.02
ST0004Execution
sub-technique

Downlink Jamming

Parent: EX-0016

Description

Downlink jammers target the users of a satellite by creating noise in the same frequency as the downlink signal from the satellite. A downlink jammer only needs to be as powerful as the signal being received on the ground and must be within the field of view of the receiving terminal’s antenna. This limits the number of users that can be affected by a single jammer. Since many ground terminals use directional antennas pointed at the sky, a downlink jammer typically needs to be located above the terminal it is attempting to jam. This limitation can be overcome by employing a downlink jammer on an air or space-based platform, which positions the jammer between the terminal and the satellite. This also allows the jammer to cover a wider area and potentially affect more users. Ground terminals with omnidirectional antennas, such as many GPS receivers, have a wider field of view and thus are more susceptible to downlink jamming from different angles on the ground.* *https://aerospace.csis.org/aerospace101/counterspace-weapons-101

Mappings

EU regulation articles

  • eu-space-actArt. 87(3)
    addresses
    high
    direct

    Downlink jamming affects ground-receive capability — within 87(3)(f) interferences-on-the-ground-segment scope; alternate geographically distributed sites mitigate via geographical splitting under 86(3)(b).

  • nis2Art. 21(2)(b)
    addresses
    moderate
    derived

    Downlink degradation localised to specific terminal geometries is a detectable incident; Art. 21(2)(b)'s incident-handling capability must surface and triage user-side jamming reports.

  • nis2Art. 21(2)(c)
    addresses
    moderate
    direct

    Downlink continuity for affected user terminals (alternate stations, beam reconfigurations, retasked relays) is core business-continuity practice under Art. 21(2)(c).

  • nis2-implAnnex 13.2.1
    addresses
    moderate
    derived

    Downlink jamming targets users on the ground; the protection-against-physical-and-environmental-threats obligation covers user-segment-side hardening (high-gain receivers, frequency hopping, beam-isolation).

  • nis2-implAnnex 3.2.1
    addresses
    moderate
    derived

    Monitoring procedures must surface degraded user-segment SNR, beam-blockage patterns and downlink-availability anomalies that signal jamming.

ENISA controls

  • ENISA-STL-2025-03-sD.23-i03
    addresses
    high

    Jam-resistant downlink waveforms protect users on the ground against in-band noise from downlink jammers.

  • ENISA-STL-2025-03-sD.35-i04
    mitigates
    moderate

    Adaptive filtering on satellite/ground modems suppresses persistent jamming frequencies for downlink reception.

Cross-reference controls

  • csf-2-0DE.AE-02Potentially adverse events are analyzed to better understand associated activities
    addresses
    moderate

    Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0016.02 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for DE.AE-02. Through SPARTA: SPARTA's catalog maps EX-0016.02 to countermeasure CM0077 Space Domain Awareness; CM0078 Space-Based Radio Frequency Mapping, and that countermeasure's own CSF references include DE.AE-02. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

  • csf-2-0DE.AE-03Information is correlated from multiple sources
    addresses
    moderate

    Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0016.02 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for DE.AE-03. Through SPARTA: SPARTA's catalog maps EX-0016.02 to countermeasure CM0077 Space Domain Awareness; CM0078 Space-Based Radio Frequency Mapping, and that countermeasure's own CSF references include DE.AE-03. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

  • csf-2-0DE.CM-01Networks and network services are monitored to find potentially adverse events
    addresses
    moderate

    Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0016.02 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for DE.CM-01. Through SPARTA: SPARTA's catalog maps EX-0016.02 to countermeasure CM0078 Space-Based Radio Frequency Mapping, and that countermeasure's own CSF references include DE.CM-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

  • csf-2-0PR.DS-02The confidentiality, integrity, and availability of data-in-transit are protected
    addresses
    moderate

    Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0016.02 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-02. Through SPARTA: SPARTA's catalog maps EX-0016.02 to countermeasure CM0029 TRANSEC; CM0083 Antenna Nulling and Adaptive Filtering, and that countermeasure's own CSF references include PR.DS-02. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

  • mitre-attack-enterpriseT1498Network Denial of Service
    addresses
    moderate

    Downlink jamming denies the ground segment's reception of telemetry/payload data; T1498 'Network Denial of Service' covers this network-DoS pattern at cross-domain level. Cross-tactic moderate.

  • mitre-attack-icsT1695Block Communications
    addresses
    moderate

    Downlink jamming inhibits the spacecraft-to-ground telemetry/payload communications; T1695 'Block Communications' covers this at cross-tactic moderate level.

  • nasa-bpgMI-INTG-01Communications Survivability Function
    mitigates
    high

    Downlink jamming denies the telemetry path, and the practice's survivability obligation covers the communications link in both directions. Defining vector and dominant scope are both inside the practice.

  • nist-80053-rev5AC-17Remote Access
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5AC-18Wireless Access
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5AC-18(5)Antennas and Transmission Power Levels
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CA-3Information Exchange
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-10(6)Component Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-11Alternate Communications Protocols
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-13Alternative Security Mechanisms
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2Contingency Plan
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(1)Coordinate with Related Plans
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(2)Capacity Planning
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(3)Resume Mission and Business Functions
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(5)Continue Mission and Business Functions
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(6)Alternate Processing and Storage Sites
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-2(7)Coordinate with External Service Providers
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5CP-8Telecommunications Services
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-20Asset Monitoring and Tracking
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-21Electromagnetic Pulse Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-6Monitoring Physical Access
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-6(1)Intrusion Alarms and Surveillance Equipment
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-6(2)Automated Intrusion Recognition and Responses
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PE-6(4)Monitoring Physical Access to Systems
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PL-8Security and Privacy Architectures
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PL-8(1)Defense in Depth
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PM-16Threat Awareness Program
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5PM-16(1)Automated Means for Sharing Threat Intelligence
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5RA-10Threat Hunting
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5RA-3Risk Assessment
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5RA-3(2)Use of All-source Intelligence
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5RA-3(3)Dynamic Threat Awareness
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5RA-6Technical Surveillance Countermeasures Survey
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SA-3System Development Life Cycle
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SA-8Security and Privacy Engineering Principles
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SA-8(19)Continuous Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-16Transmission of Security and Privacy Attributes
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-16(1)Integrity Verification
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-26Decoys
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-30Concealment and Misdirection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-30(5)Concealment of System Components
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-40Wireless Link Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-40(1)Electromagnetic Interference
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-40(3)Imitative or Manipulative Communications Deception
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-40(4)Signal Parameter Identification
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-5Denial-of-service Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-8(1)Cryptographic Protection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-8(3)Cryptographic Protection for Message Externals
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SC-8(4)Conceal or Randomize Communications
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SI-4System Monitoring
    addresses
    moderate

    SI-4 mitigates EX-0016.02 by detecting ground-side interference patterns indicative of downlink jamming.

  • nist-80053-rev5SI-4(14)Wireless Intrusion Detection
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SI-4(17)Integrated Situational Awareness
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SI-4(24)Indicators of Compromise
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • nist-80053-rev5SR-8Notification Agreements
    relates to
    moderate

    Referenced in: sparta-data

    Mapped by SPARTA, not curated by SafeMode Space.

  • space-shieldT2050Ground Segment Jamming
    addresses
    high

    T2050 'Ground Segment Jamming' is the direct counterpart of EX-0016.02 Downlink Jamming — both describe jamming the downlink-reception path so ground users cannot receive data.

  • space-shieldT2050.001Jamming from the ground
    addresses
    moderate

    T2050.001 'Jamming from the ground' covers the typical ground-based-jammer subset of downlink jamming.

SPARTA countermeasures

Cite as SafeMode Space, EX-0016.02 (SPARTA v3.2).

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.