TA007 Lateral Movement · T007.002 — Technique
Swarm Node Hopping
Propagation of malicious code from a single compromised swarm node to adjacent nodes via inter-drone mesh communication.
Sub-techniques (3)
- Mesh worm self-propagation
- Swarm broadcast channel hijacking
- Consensus algorithm poisoning
Applicable countermeasures
CM-005 UTM and U-Space API Authentication
OAuth 2.0 or mTLS for all UTM/U-Space API interactions with role-based access control and anomaly detection.
NIST SP 800-53 IA-2 · EUROCAE ED-269 · SESAR U-Space Spec · ISO/IEC 27001 A.9
CM-008 GCS Network Segmentation and Hardening
Isolation of GCS from enterprise networks, least-privilege access enforcement, host hardening, and network anomaly detection.
NIST SP 800-53 SC-7 · CIS Controls v8 Control 12 · ISO/IEC 27001 A.13 · NSA/CISA Segmentation Guide
CM-010 Swarm Node Mutual Authentication
Open in the interactive matrix
Cryptographic mutual authentication between all swarm nodes with message integrity to prevent rogue insertion and hopping.
NIST SP 800-53 IA-3 · IEEE 1609.2 · STANAG 4586 · IEC 62443-3-3 SR 1.2