Update - v1.1

Start Date	End Date
October 28 2022	December 08 2022

Below highlights the changes to the website, techniques, sub-techniques, and/or countermeasures.

Website Updates

Techniques

New Techniques

Modified Techniques

REC-0005: Eavesdropping
RD-0001: Acquire Infrastructure
IA-0002: Compromise Software Defined Radio
IA-0007: Compromise Ground Station
EX-0013: Flooding
EX-0010: Inject Malicious Code
EX-0015: Side-Channel Attack
EX-0014: Spoofing
EXF-0007: Compromised Ground Station
EXF-0008: Compromised Developer Site
PER-0002: Backdoor
PER-0003: Ground System Presence
DE-0001: Disable Fault Management
DE-0004: Masquerading
LM-0001: Hosted Payload
IMP-0002: Disruption
IMP-0003: Denial
IMP-0004: Degradation
IMP-0005: Destruction
IMP-0006: Theft

Sub-Techniques

New Sub-Techniques

Modified Sub-Techniques

REC-0001.01: Software
REC-0001.02: Firmware
REC-0001.03: Cryptographic Algorithms
REC-0001.04: Data Bus
REC-0001.05: Thermal Control System
REC-0001.06: Maneuver & Control
REC-0001.07: Payload
REC-0001.08: Power
REC-0001.09: Fault Management
REC-0002.01: Identifiers
REC-0002.02: Organization
REC-0002.03: Operations
REC-0003.01: Communications Equipment
REC-0003.02: Commanding Details
REC-0004.01: Flight Termination
REC-0005.01: Uplink Intercept
REC-0005.02: Downlink Intercept
REC-0005.03: Proximity Operations
REC-0006.01: Development Environment
REC-0006.02: Security Testing Tools
REC-0008.01: Hardware
REC-0008.02: Software
REC-0008.03: Known Vulnerabilities
RD-0001.01: Ground Station Equipment
RD-0001.02: Commercial Ground Station Services
RD-0001.03: Spacecraft
RD-0002.01: Mission-Operated Ground System
RD-0002.02: 3rd Party Ground System
RD-0002.03: 3rd-Party Spacecraft
RD-0003.01: Exploit/Payload
RD-0003.02: Cryptographic Keys
RD-0004.01: Identify/Select Delivery Mechanism
RD-0004.02: Upload Exploit/Payload
IA-0001.01: Software Dependencies & Development Tools
IA-0001.02: Software Supply Chain
IA-0001.03: Hardware Supply Chain
IA-0004.01: Ground Station
IA-0004.02: Receiver
IA-0005.01: Compromise Emanations
IA-0005.02: Docked Vehicle / OSAM
IA-0005.03: Proximity Grappling
IA-0007.01: Compromise On-Orbit Update
IA-0007.02: Malicious Commanding via Valid GS
IA-0008.01: Rogue Ground Station
IA-0008.02: Rogue Spacecraft
IA-0009.01: Mission Collaborator (academia, international, etc.)
IA-0009.02: Vendor
IA-0009.03: User Segment
EX-0001.01: Command Packets
EX-0001.02: Bus Traffic
EX-0013.02: Erroneous Data
EX-0013.01: Valid Commands
EX-0005.01: Design Flaws
EX-0005.02: Malicious Use of Hardware Commands
EX-0008.01: Absolute Time Sequences
EX-0008.02: Relative Time Sequences
EX-0009.01: Flight Software
EX-0009.02: Operating System
EX-0009.03: Known Vulnerability (COTS/FOSS)
EX-0012.01: Registers
EX-0012.02: Internal Routing Tables
EX-0012.03: Memory Write/Loads
EX-0012.04: App/Subscriber Tables
EX-0012.05: Scheduling Algorithm
EX-0012.06: Science/Payload Data
EX-0012.07: Propulsion Subsystem
EX-0012.08: Attitude Determination & Control Subsystem
EX-0012.09: Electrical Power Subsystem
EX-0012.10: Command & Data Handling Subsystem
EX-0012.11: Watchdog Timer (WDT)
EX-0012.12: System Clock
EX-0012.13: Poison AI/ML Training Data
EX-0014.01: Time Spoof
EX-0014.02: Bus Traffic
EX-0014.03: Sensor Data
EXF-0002.01: Power Analysis Attacks
EXF-0002.02: Electromagnetic Leakage Attacks
EXF-0002.03: Traffic Analysis Attacks
EXF-0002.04: Timing Attacks
EXF-0002.05: Thermal Imaging attacks
EXF-0003.01: Uplink Intercept
EXF-0003.02: Downlink Intercept
PER-0002.01: Hardware
PER-0002.02: Software
DE-0002.01: Inhibit Ground System Functionality
DE-0002.02: Jam Link Signal
DE-0002.03: Inhibit Spacecraft Functionality
DE-0003.01: Vehicle Command Counter (VCC)
DE-0003.02: Rejected Command Counter
DE-0003.03: Command Receiver On/Off Mode
DE-0003.04: Command Receivers Received Signal Strength
DE-0003.05: Command Receiver Lock Modes
DE-0003.06: Telemetry Downlink Modes
DE-0003.07: Cryptographic Modes
DE-0003.08: Received Commands
DE-0003.09: System Clock
DE-0003.10: GPS Ephemeris
DE-0003.11: Watchdog Timer (WDT)
DE-0003.12: Poison AI/ML Training Data

Countermeasures

New Countermeasures

Modified Countermeasures