Skip to content
safemode.space
All techniques
IMP-0011
ST0009Impact

Command and Data Flow Manipulation

Description

Command and Data Flow Manipulation is the d deliberate alteration of the source, destination, path, delivery, availability, timing, sequence, or duplication of commands or data as they move within, to, or from a spacecraft. An adversary may inject an unauthorized command or alter a legitimate command before execution. The adversary may also prevent traffic from arriving, cause it to arrive at the wrong time or destination, or change its sequence. This mechanism applies to both external communications and internal spacecraft pathways. Passive observation alone does not qualify. Altering command or data content may also constitute Data Manipulation.
VectorIllustrative Application
CollectIf the objective is Collect, an adversary could duplicate or redirect protected telemetry to an unauthorized destination.
PivotIf the objective is Pivot, an adversary could route activity through spacecraft communication paths to reach another connected asset or trust domain.
SubvertTIf the objective is Subvert, an adversary could delay or reorder commands and telemetry to disrupt operations and mislead defenders.
SeizeIf the objective is Seize, an adversary could suppress legitimate command traffic while forwarding unauthorized commands to assume control of mission functions.
DisableIf the objective is Disable, an adversary could block command or data flows required for the spacecraft to conduct its intended mission or an essential mission function.

Reproduced verbatim from SPARTA v4.0, including its own citation markers, spelling and formatting. Nothing in the text above is SafeMode Space's wording, and nothing has been corrected.

Mappings

No mappings have been made here yet. That is a statement about this corpus, not about the law: it means curation has not reached this entity, not that nothing applies to it.

No ruling has been recorded either way.

Cite as SafeMode Space, IMP-0011 (SPARTA v4.0), https://safemode.space/reference/techniques/imp-0011, accessed YYYY-MM-DD. Replace YYYY-MM-DD with the date you read the page; the corpus is curated continuously, so mappings can change between readings. To cite one mapping rather than this page, append its anchor to the URL — every mapping row has an id of the form technique--collection--target, the same on every page that lists it. See how to cite. Sources and licence: sources and attribution. A mapping on this page is interpretive analysis of how a technique and a provision relate, not a statement of law and not compliance guidance. Read the disclaimer.

Corpus 2026.08.24-1, built 2026-08-24 from 226 techniques, 308 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.