In orbit proximity intelligence: Telecommand Protocol Interception

An attacker tries to gain knowledge about the Telecommand implementation, including the authentication and encryption status [1]. While the signal is weak, the proximity to the legitimate recipient may render it more suitable in case very narrow beams are used.

Standard/references: [2] [3] [4]

ID: T2029.004
Sub-technique of:  T2029
Tactic: Reconnaissance
Platforms: Space-link communication
Version: 2.0
Created: 17 April 2023
Last Modified: 21 April 2023

Mitigations

This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.

References