• MITRE logo
  • domains
  • CAD
  • ontology
  • artifacts
  • about
  • resources
  • contribute
  • faq
  • blog
  • search
  • NSA logo
Esc

Command and Data Flow Manipulation - IMP-0011

(SPARTA Technique)


Definition

Command and Data Flow Manipulation is the d deliberate alteration of the source, destination, path, delivery, availability, timing, sequence, or duplication of commands or data as they move within, to, or from a spacecraft. An adversary may inject an unauthorized command or alter a legitimate command before execution. The adversary may also prevent traffic from arriving, cause it to arrive at the wrong time or destination, or change its sequence. This mechanism applies to both external communications and internal spacecraft pathways. Passive observation alone does not qualify. Altering command or data content may also constitute Data Manipulation. Vector: Illustrative Application Collect: If the objective is Collect, an adversary could duplicate or redirect protected telemetry to an unauthorized destination. Pivot: If the objective is Pivot, an adversary could route activity through spacecraft communication paths to reach another connected asset or trust domain. Subvert: TIf the objective is Subvert, an adversary could delay or reorder commands and telemetry to disrupt operations and mislead defenders. Seize: If the objective is Seize, an adversary could suppress legitimate command traffic while forwarding unauthorized commands to assume control of mission functions. Disable: If the objective is Disable, an adversary could block command or data flows required for the spacecraft to conduct its intended mission or an essential mission function.


D3FEND Inferred Relationships





There are no artifacts defined on this offensive technique (yet). Please consider contributing an addition to D3FEND.
json





Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

UI: 0.26.0