Skip to content
safemode.space
All techniques
IMP-0012
ST0009Impact

Software, Firmware, or Programmable Logic Manipulation

Description

Software, Firmware, or Programmable Logic Manipulation is the deliberate alteration of the implementation that controls spacecraft behavior. An adversary may modify executable code, replace firmware, or load altered programmable logic. The change may affect startup, command processing, autonomy, security enforcement, or subsystem control. This mechanism applies when the implementation itself changes. Changing only the settings used by an unchanged implementation is Configuration Manipulation. Changing only the information processed by that implementation is Data Manipulation.
VectorIllustrative Application
CollectIf the objective is Collect, an adversary could modify onboard software to copy protected engineering or mission data into an accessible store or downlink stream.
PivotIf the objective is Pivot, an adversary could alter communications software or programmable routing logic to pass attacker activity into another connected asset or trust domain.
SubvertTIf the objective is Subvert, an adversary could alter fault-management software to suppress valid faults or generate misleading recovery activity.
SeizeIf the objective is Seize, an adversary could modify command-authorization software so attacker tasking is accepted while legitimate operator commands are rejected.
DisableIf the objective is Disable, an adversary could replace mission software or programmable logic with an altered implementation that prevents an essential mission function from operating.

Reproduced verbatim from SPARTA v4.0, including its own citation markers, spelling and formatting. Nothing in the text above is SafeMode Space's wording, and nothing has been corrected.

Mappings

No mappings have been made here yet. That is a statement about this corpus, not about the law: it means curation has not reached this entity, not that nothing applies to it.

No ruling has been recorded either way.

Cite as SafeMode Space, IMP-0012 (SPARTA v4.0), https://safemode.space/reference/techniques/imp-0012, accessed YYYY-MM-DD. Replace YYYY-MM-DD with the date you read the page; the corpus is curated continuously, so mappings can change between readings. To cite one mapping rather than this page, append its anchor to the URL — every mapping row has an id of the form technique--collection--target, the same on every page that lists it. See how to cite. Sources and licence: sources and attribution. A mapping on this page is interpretive analysis of how a technique and a provision relate, not a statement of law and not compliance guidance. Read the disclaimer.

Corpus 2026.08.24-1, built 2026-08-24 from 226 techniques, 308 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.