Unified Mission Defense Graph & Attack-Path Analyzer
Part 4 — End-to-End Attack Surface EngineDefensive Trajectory Modeling: Operator → Ground → Uplink → Satellite → Flight Computer
Active Graph Nodes:13 Nodes / 11 Edges
END-TO-END SATELLITE MISSION TOPOLOGY
Nominal Warning Compromised
operator Segment Domain
Cmdr. Sarah Vance (Flight Director)
ID: op-vancewarning
!
DevSecOps Deployment Workstation
ID: op-dev-stationnominal
ground Segment Domain
Ground Identity Provider (SSO-OIDC)
ID: gnd-idpwarning
Mission Control Secure VPN Gateway
ID: gnd-vpnnominal
Mission Control Center (MCC-ALPHA-01)
ID: gnd-mccwarning
Telecommand Dispatch API (CMD-API-01)
ID: gnd-cmd-apiwarning
!
Svalbard Ground Station (GS-SVALBARD-01)
ID: gnd-station-svalbardwarning
High-Gain Tracking Antenna 4
ID: gnd-antenna-04nominal
link Segment Domain
RF Telecommand Uplink (S-Band / CCSDS)
ID: link-svalbard-uplinkwarning
!
space Segment Domain
AETHER-1 (EO Observation Satellite)
ID: sat-aether-1warning
Onboard Flight Computer (OBC-AETHER-1)
ID: sat-obc-1warning
!
Multispectral Optical Imaging Payload
ID: sat-payload-1nominal
ADCS Star Tracker & Reaction Wheels
ID: sat-adcs-1nominal
Attack-Path & Blast Radius Inspector
Selected Node
AETHER-1 (EO Observation Satellite)
Domain: space • Criticality: critical
DEFENSIVE ATTACK PATH DETECTEDBlast Radius: 100/100
Defensive Threat Model: An anomaly at AETHER-1 (EO Observation Satellite) can traverse 2 hops reaching critical asset Multispectral Optical Imaging Payload. Potential command integrity or mission availability risk.
Trajectory Hops (2 hops):
sat-aether-1sat-obc-1sat-payload-1
Trust Boundaries Crossed:
- Trust Level Change (high_trust → verified)
Recommended Defensive Action:
Isolate boundary between AETHER-1 (EO Observation Satellite) and Onboard Flight Computer (OBC-AETHER-1). Revoke operational tokens & verify telemetry signature.