1. Home
  2. Techniques
  3. Space
  4. Develop/Obtain Capabilities

Develop/Obtain Capabilities

ID Name
T2007.002 Code Signing Certificates
T2007.003 Digital Certificates
T2007.004 DSSS or Frequency hopping sequence
T2007.005 Malicious supply chain capabilities
T2007.006 Software vulnerabilities
T2007.008 Space Protocol Vulnerabilities
T2007.009 Tools for attacking space systems
T2007.010 TC/TM request forging
T2007.011 Cryptographic Keys

Adversaries may build, buy or steal capabilities that can be used during targeting.

standards: [1][2][3][1]

ID: T2007
Sub-techniques:  T2007.002, T2007.003, T2007.004, T2007.005, T2007.006, T2007.008, T2007.009, T2007.010, T2007.011
ⓘ
Tactic: Resource Development
ⓘ
Platforms: Space Segment, Space-link communication
Version: 2.0
Created: 25 August 2022
Last Modified: 28 November 2024

Mitigations

ID Mitigation Description
M2015 Cryptographic DSSS sequence
M2060 Establish processes, procedures, and security measures to protect cryptographic keys / key management
M2039 Fuzzing / testing
M2040 Secure PKI implementation
M2038 Source code review
M2069 Strong authentication of Telecommands
M2024 Supply chain confidence

References

  1. CCSDS. (2022, July). CCSDS RECOMMENDED STANDARD FOR SPACE DATA LINK SECURITY PROTOCOL, CCSDS 355.0-B-2. Retrieved April 19, 2023.
  2. ECSS. (n.d.). ECSS-E-ST-80C DIR1 (formerly ECSS-Q-ST-80-10C DIR1), Security in Space Systems Lifecycles. Retrieved November 28, 2024.
  1. CCSDS. (2019, July). RECOMMENDED STANDARD FOR AUTHENTICATION SECURITY CREDENTIALS, CCSDS 357.0-B-1. Retrieved September 29, 2022.