Update - v1.5

Start Date	End Date
October 17 2023	November 29 2023

Below highlights the changes to the website, techniques, sub-techniques, and/or countermeasures.

Website Updates

Added Control Mapper Tool
Added JSON Creator Tool
Added features to Navigator for quicker selections
Added features to CM Mapper for quicker selections
Added control mappings to Navigator view
Mapped SPARTA Countermeasures to ESA Mitigations
Fixed minor text issues

Techniques

New Techniques

Modified Techniques

REC-0008: Gather Supply Chain Information
REC-0009: Gather Mission Information
RD-0005: Obtain Non-Cyber Capabilities
EX-0001: Replay
PER-0005: Valid Credentials
DE-0006: Modify Whitelist
DE-0008: Bootkit
DE-0010: Overflow Audit Log
DE-0011: Valid Credentials
LM-0007: Valid Credentials
IMP-0001: Deception (or Misdirection)

Sub-Techniques

New Sub-Techniques

Modified Sub-Techniques

REC-0003.04: Valid Credentials
IA-0001.03: Hardware Supply Chain

Countermeasures

New Countermeasures

Modified Countermeasures

CM0000: Countermeasure Not Identified
CM0001: Protect Sensitive Information
CM0008: Security Testing Results
CM0009: Threat Intelligence Program
CM0020: Threat modeling
CM0022: Criticality Analysis
CM0024: Anti-counterfeit Hardware
CM0025: Supplier Review
CM0026: Original Component Manufacturer
CM0027: ASIC/FPGA Manufacturing
CM0028: Tamper Protection
CM0041: User Training
CM0052: Insider Threat Protection
CM0054: Two-Person Rule
CM0074: Distributed Constellations
CM0075: Proliferated Constellations
CM0076: Diversified Architectures
CM0077: Space Domain Awareness
CM0078: Space-Based Radio Frequency Mapping
CM0079: Maneuverability
CM0080: Stealth Technology
CM0081: Defensive Jamming and Spoofing
CM0082: Deception and Decoys
CM0083: Antenna Nulling and Adaptive Filtering
CM0084: Physical Seizure
CM0085: Electromagnetic Shielding
CM0086: Filtering and Shuttering
CM0087: Defensive Dazzling/Blinding
CM0002: COMSEC
CM0030: Crypto Key Management
CM0031: Authentication
CM0033: Relay Protection
CM0073: Traffic Flow Analysis Defense
CM0003: TEMPEST
CM0040: Shared Resource Leakage
CM0049: Machine Learning Data Integrity
CM0050: On-board Message Encryption
CM0004: Development Environment Security
CM0007: Software Version Numbers
CM0010: Update Software
CM0011: Vulnerability Scanning
CM0012: Software Bill of Materials
CM0013: Dependency Confusion
CM0015: Software Source Control
CM0016: CWE List
CM0017: Coding Standard
CM0018: Dynamic Analysis
CM0019: Static Analysis
CM0021: Software Digital Signature
CM0023: Configuration Management
CM0036: Session Termination
CM0039: Least Privilege
CM0046: Long Duration Testing
CM0047: Operating System Security
CM0055: Secure Command Mode(s)
CM0062: Dummy Process - Aggregator Node
CM0069: Process White Listing
CM0005: Ground-based Countermeasures
CM0034: Monitor Critical Telemetry Points
CM0035: Protect Authenticators
CM0053: Physical Security Controls
CM0056: Data Backup
CM0070: Alternate Communications Paths
CM0006: Cloaking Safe-mode
CM0032: On-board Intrusion Detection & Prevention
CM0042: Robust Fault Management
CM0044: Cyber-safe Mode
CM0051: Fault Injection Redundancy
CM0066: Model-based System Verification
CM0067: Smart Contracts
CM0068: Reinforcement Learning
CM0014: Secure boot
CM0037: Disable Physical Ports
CM0038: Segmentation
CM0043: Backdoor Commands
CM0045: Error Detection and Correcting Memory
CM0048: Resilient Position, Navigation, and Timing
CM0057: Tamper Resistant Body
CM0058: Power Randomization
CM0059: Power Consumption Obfuscation
CM0060: Secret Shares
CM0061: Power Masking
CM0063: Increase Clock Cycles/Timing
CM0064: Dual Layer Protection
CM0065: OSAM Dual Authorization
CM0071: Communication Physical Medium
CM0072: Protocol Update / Refactoring
CM0029: TRANSEC