• MITRE logo
  • domains
  • CAD
  • ontology
  • artifacts
  • about
  • resources
  • contribute
  • faq
  • blog
  • search
  • NSA logo
Esc

Data Manipulation - IMP-0010

(SPARTA Technique)


Definition

Data Manipulation is the deliberate alteration of information used or handled by a spacecraft. The affected information may come from onboard sensors, external sources, internal processing, or stored records. An adversary may falsify, suppress, replace, delete, or corrupt this information. This mechanism applies when the information itself changes, whether the data is at rest, in use, or being exchanged. Changing the settings that govern how the system interprets that information is Configuration Manipulation. Changing only how the information moves or arrives is Command and Data Flow Manipulation. Vector: Illustrative Application Collect: If the objective is Collect, an adversary could alter data labels or indexes so protected information appears in an authorized query or routine downlink. Pivot: If the objective is Pivot, an adversary could alter data exchanged through a trusted spacecraft interface to carry adversary-controlled content into another connected asset. Subvert: TIf the objective is Subvert, an adversary could falsify sensor or state-estimate data so the spacecraft makes incorrect autonomous decisions. Seize: If the objective is Seize, an adversary could alter command-source or authentication data so onboard systems accept unauthorized tasking as legitimate. Disable: If the objective is Disable, an adversary could corrupt stored attitude or navigation data so the spacecraft cannot maintain mission-required pointing.


D3FEND Inferred Relationships





There are no artifacts defined on this offensive technique (yet). Please consider contributing an addition to D3FEND.
json





Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

UI: 0.26.0