The Aerospace Corporation created the Space Attack Research and Tactic Analysis (SPARTA) matrix to address the information and communication barriers that hinder the identification and sharing of space-system Tactic, Techniques, and Procedures (TTP). SPARTA is intended to provide unclassified information to space professionals about how spacecraft may be compromised via cyber and traditional counterspace means. The matrix defines and categorizes commonly identified activities that contribute to spacecraft compromises. Where applicable the SPARTA TTPs are cross referenced to other Aerospace related work like TOR 2021-01333 REV A which is available in the Related Work menu of the SPARTA website.

Space Attack Research & Tactic Analysis (SPARTA)

9 techniques 5 techniques 12 techniques 18 techniques 5 techniques 11 techniques 7 techniques 10 techniques 6 techniques
Gather Spacecraft Design Information (9)
=
Gather Spacecraft Descriptors (3)
=
Gather Spacecraft Communications Information (4)
=
Gather Launch Information (1)
=
Eavesdropping (4)
=
Gather FSW Development Information (2)
=
Monitor for Safe-Mode Indicators (0)
Gather Supply Chain Information (4)
=
Gather Mission Information (0)
Acquire Infrastructure (4)
=
Compromise Infrastructure (3)
=
Obtain Cyber Capabilities (2)
=
Obtain Non-Cyber Capabilities (4)
=
Stage Capabilities (2)
=
Compromise Supply Chain (3)
=
Compromise Software Defined Radio (0)
Crosslink via Compromised Neighbor (0)
Secondary/Backup Communication Channel (2)
=
Rendezvous & Proximity Operations (3)
=
Compromise Hosted Payload (0)
Compromise Ground System (2)
=
Rogue External Entity (3)
=
Trusted Relationship (3)
=
Exploit Reduced Protections During Safe-Mode (0)
Auxiliary Device Compromise (0)
Assembly, Test, and Launch Operation Compromise (0)
Replay (2)
=
Position, Navigation, and Timing (PNT) Geofencing (0)
Modify Authentication Process (0)
Compromise Boot Memory (0)
Exploit Hardware/Firmware Corruption (2)
=
Disable/Bypass Encryption (0)
Trigger Single Event Upset (0)
Time Synchronized Execution (2)
=
Exploit Code Flaws (3)
=
Malicious Code (4)
=
Exploit Reduced Protections During Safe-Mode (0)
Modify On-Board Values (13)
=
Flooding (2)
=
Jamming (3)
=
Spoofing (5)
=
Side-Channel Attack (0)
Kinetic Physical Attack (2)
=
Non-Kinetic Physical Attack (3)
=
Memory Compromise (0)
Backdoor (2)
=
Ground System Presence (0)
Replace Cryptographic Keys (0)
Valid Credentials (0)
Disable Fault Management (0)
Prevent Downlink (3)
=
Modify On-Board Values (12)
=
Masquerading (0)
Exploit Reduced Protections During Safe-Mode (0)
Modify Whitelist (0)
Rootkit (0)
Bootkit (0)
Camouflage, Concealment, and Decoys (CCD) (3)
=
Overflow Audit Log (0)
Valid Credentials (0)
Hosted Payload (0)
Exploit Lack of Bus Segregation (0)
Constellation Hopping via Crosslink (0)
Visiting Vehicle Interface(s) (0)
Virtualization Escape (0)
Launch Vehicle Interface (1)
=
Valid Credentials (0)
Replay (0)
Side-Channel Attack (5)
=
Eavesdropping (2)
=
Out-of-Band Communications Link (0)
Proximity Operations (0)
Modify Communications Configuration (2)
=
Compromised Ground System (0)
Compromised Developer Site (0)
Compromised Partner Site (0)
Payload Communication Channel (0)
Deception (or Misdirection) (0)
Disruption (0)
Denial (0)
Degradation (0)
Destruction (0)
Theft (0)