| ID | Name |
|---|---|
| T2009.001 | Steal cryptographic keys |
| T2009.002 | Forge Digital Certificates |
| T2009.003 | Brute force attack against TC channel or mission channel |
If an attacker gains control of the credential-management system and issues credentials, he can access the system and maintain a persistent control on it. There is a need to invalidate existing credentials and reissue all credentials. CCSDS recommends two forms of credentials: X.509 certificates and protected simple authentication. The authenticity of an X.509 certificate is dependent upon the digital signature of the CA attesting to the credential. If the digital signature algorithm used by the CA is of insufficient cryptographic strength, a credential may be spoofed. [1]
Standard/references: [2]
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.