STARM · NW-06 · NETWORK

Man-in-the-Middle (MitM)

Back to the STARM matrix

STARMCatalog entries from the DIPS Threat Inventory. The paper cites that dataset and does not use this name.

Intercepting/modifying traffic between ground and space.

Severity in the dataset8/10

Not the paper’s H/M/L.

Target
Data / Instructions
Layer in the inventory
Network Layer
Mitigation
Mutual TLS and certificate pinning.
How the inventory says to fix it
Rule-based: mTLS (mutual TLS) and PKI certificate pinning.
Quick fix
VPN Tunneling
ML approaches named
Graph Neural Networks (traffic relationships), Random Forest, Gradient Boosting, LSTM for traffic sequence analysis
Methodology
Latency anomalies, certificate or key mismatches, packet timing irregularities, command integrity deviations
Handler role
Network Security
Stage
Operation
Standard named
ISO/IEC 27033
Status in the inventory
Avoided

STARMCatalog entries from the DIPS Threat Inventory. The paper cites that dataset and does not use this name.

Connection recorded in the inventory

Eavesdropping