This is an European Space Agency Space instance of the MITRE ATT&CK Website.

MITIGATIONS

Accountability of actions

Anti-replay protection mechanisms

Application of Least Privilege principle

Authenticated encryption

Authentication combined with means to ensure the identity of the other party using certificates or pre-shared keys

Authentication mechanisms using approved cryptographic means

Bulk data link encryption

CCSDS Coding & Synchronization sublayer

CCSDS SDLS Sequence numbers

Credential Access Protection

Cryptographic DSSS sequence

Data integrity schemes

Defense-in-depth measures

Detection of abnormal behaviour at avionics bus / Prevention mechanisms

Detection techniques of exploitation attempts

Digital certificates

Digital signing of software components

Dynamic Routing

Encrypt Sensitive Information

Encryption of communications

End-to-End Security Measures for Space Systems

Establish processes, procedures, and security measures to protect cryptographic keys / key management

Filter Network Traffic

Frequency Hopping

Fuzzing / testing

High-power up-link

Implementation on Trusted Execution Environments for critical parts of procedures

Internal segregation and /or authentication

Log integrity protection

Multi-factor authentication

Network Intrusion Prevention

Network Segmentation

Non-repudiation mechanisms

On Board Authentication for executing critical commands

Opaque spacecraft design

Operating Systems partitioning

Overloading / flooding detection mechanisms

Partitioning/Separation

Patching to the latest available software version

Payload specific countermeasures

Physical and network protection of key management systems

Physical protection and isolation of root keys

Physical security

Platform protection

Proper Information Classification and Flow-Down Guidelines

Protect OTAR Key Management Service

Protect/isolate Key Mangement Facility

Recovery to a known good state

Remote attestation

Revoke keys and replace with new ones (including master keys, if needed)

Role Based Access Control

Secure Design and Implementation of Ground Segment for Space Systems

Secure PKI implementation

Secure Safe Mode

Separate authentication for critical commands

Software segregation / isolation

Source code review

Space Link Extension

Spread Spectrum

Strong authentication of Telecommands

Supply chain confidence

Supply chain protections

Supply from trustworthy sources only

Track debris and space vehicles

Usage of directive transmit antenna

Use keys of sufficient length

Vulnerability/malware scanning

Zero Trust Architecture

MITIGATIONS

A-C

Accountability of actions

Anti-replay protection mechanisms

Application of Least Privilege principle

Authenticated encryption

Authentication combined with means to ensure the identity of the other party using certificates or pre-shared keys

Authentication mechanisms using approved cryptographic means

Bulk data link encryption

CCSDS Coding & Synchronization sublayer

CCSDS SDLS Sequence numbers

Credential Access Protection

Cryptographic DSSS sequence

D-F

Data integrity schemes

Defense-in-depth measures

Detection of abnormal behaviour at avionics bus / Prevention mechanisms

Detection techniques of exploitation attempts

Digital certificates

Digital signing of software components

Dynamic Routing

Encrypt Sensitive Information

Encryption of communications

End-to-End Security Measures for Space Systems

Establish processes, procedures, and security measures to protect cryptographic keys / key management

Filter Network Traffic

Frequency Hopping

Fuzzing / testing

G-I

High-power up-link

Implementation on Trusted Execution Environments for critical parts of procedures

Internal segregation and /or authentication

J-L

Log integrity protection

M-O

Multi-factor authentication

Navigation Message Authentication (NMA)

Network Intrusion Prevention

Network Segmentation

Non-repudiation mechanisms

On Board Authentication for executing critical commands

Opaque spacecraft design

Operating Systems partitioning

Overloading / flooding detection mechanisms

P-R

Partitioning/Separation

Patching to the latest available software version

Payload specific countermeasures

Physical and network protection of key management systems

Physical protection and isolation of root keys

Physical security

Platform protection

Proper Information Classification and Flow-Down Guidelines

Protect OTAR Key Management Service

Protect/isolate Key Mangement Facility

Recovery to a known good state

Remote attestation

Revoke keys and replace with new ones (including master keys, if needed)

Role Based Access Control

S-U

Secure Design and Implementation of Ground Segment for Space Systems

Secure PKI implementation

Secure Safe Mode

Separate authentication for critical commands

Software segregation / isolation

Source code review

Space Link Extension

Spread Spectrum

Strong authentication of Telecommands

Supply chain confidence

Supply chain protections

Supply from trustworthy sources only

Track debris and space vehicles

Usage of directive transmit antenna

Use keys of sufficient length

V-X

Vulnerability/malware scanning

Y-Z

Zero Trust Architecture

Partitioning/Separation

Time and Space Partitioning or other satellite hypervisor types should protect systems from mutual interferences, creating security borders between services and preventing unauthorized interactions. ^[1]

ID: M2007

Version: 1.1

Created: 27 September 2022

Last Modified: 29 September 2022

Techniques Addressed by Mitigation

Domain	ID		Name	Use
	T2017		Compromise of another partition in Time and Space Partitioning OS or other types of satellite hypervisors
	T2016		Lateral Movement via common Avionics Bus
	T2034		Spacecraft's Components Discovery

References

James Windsor, Kjeld Hjortnaes, ESA. (2009). Time and Space Partitioning in Spacecraft Avionics. Retrieved September 29, 2022.