Valid Credentials

Adversaries may obtain and abuse credentials to gain Initial Access or Persistence in a space resource. Compromised credentials may be used to bypass access controls placed on systems within the network and to decrypt communication, to send authenticate messages and to take control of the spacecraft. Gained credentials may even be used for persistent access to the resource.

Adversaries may obtain and abuse master or session keys, or target the digital certificates used for the authentication.

Standards: [1] [2]

ID: T2009
Sub-techniques:  T2009.001, T2009.002, T2009.003
Platforms: Space Segment, Space-link communication
Version: 2.0
Created: 25 August 2022
Last Modified: 21 April 2023

Mitigations

References