• MITRE logo
  • domains
  • CAD
  • ontology
  • artifacts
  • about
  • resources
  • contribute
  • faq
  • blog
  • search
  • NSA logo
Esc

Software, Firmware, or Programmable Logic Manipulation - IMP-0012

(SPARTA Technique)


Definition

Software, Firmware, or Programmable Logic Manipulation is the deliberate alteration of the implementation that controls spacecraft behavior. An adversary may modify executable code, replace firmware, or load altered programmable logic. The change may affect startup, command processing, autonomy, security enforcement, or subsystem control. This mechanism applies when the implementation itself changes. Changing only the settings used by an unchanged implementation is Configuration Manipulation. Changing only the information processed by that implementation is Data Manipulation. Vector: Illustrative Application Collect: If the objective is Collect, an adversary could modify onboard software to copy protected engineering or mission data into an accessible store or downlink stream. Pivot: If the objective is Pivot, an adversary could alter communications software or programmable routing logic to pass attacker activity into another connected asset or trust domain. Subvert: TIf the objective is Subvert, an adversary could alter fault-management software to suppress valid faults or generate misleading recovery activity. Seize: If the objective is Seize, an adversary could modify command-authorization software so attacker tasking is accepted while legitimate operator commands are rejected. Disable: If the objective is Disable, an adversary could replace mission software or programmable logic with an altered implementation that prevents an essential mission function from operating.


D3FEND Inferred Relationships





There are no artifacts defined on this offensive technique (yet). Please consider contributing an addition to D3FEND.
json





Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

Use of the MITRE D3FEND™ Knowledge Graph and website is subject to the Terms of Use. Use of the MITRE D3FEND website is subject to the MITRE D3FEND Privacy Policy. MITRE D3FEND is funded by the National Security Agency (NSA) Cybersecurity Directorate and managed by the National Security Engineering Center (NSEC) which is operated by The MITRE Corporation. MITRE D3FEND; and the MITRE D3FEND logo are trademarks of The MITRE Corporation. This software was produced for the U. S. Government under Basic Contract No. W56KGU-18-D-0004, and is subject to the Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation Clause 252.227-7014 (FEB 2012)
© 2025 The MITRE Corporation.
Approved for Public Release; Distribution Unlimited #20-2338 and #23-1207.

UI: 0.26.0