A domain-specific template (.tb7) for the Microsoft Threat Modeling Tool that automatically identifies space-domain cyber threats when users build Data Flow Diagrams of satellite and ground system architectures.
As space systems become increasingly interconnected and dependent on open platformsE, their cyber-attack surface continues to expand. Accordingly, major space cybersecurity policies and standards — including SPD-5, NIST, and ISO — emphasize the importance of threat modeling as a foundational security activity. However, existing threat modeling tools and templates do not address the unique threat landscape of the space domain.
This template enables automated, space-specific threat identification within the Microsoft Threat Modeling Tool by bridging three cybersecurity knowledge bases — SPARTA, MITRE ATT&CK, and D3FEND. The MITRE ATT&CK serves as the logical intermediary that maps space-specific threats (SPARTA) to defensive artifact properties (D3FEND DAO) embedded in each stencil.
When a user constructs a Data Flow Diagram of a space system architecture, the tool automatically generates relevant SPARTA-mapped threats based on the components and data flows in the diagram.
| Requirement | Note |
|---|---|
| Microsoft Threat Modeling Tool | Free download from Microsoft. Windows only. |
No other software or library is required.
- Download the
.tb7template file from this repository. - Open Microsoft Threat Modeling Tool.
- Go to File → New Template (or Open Template) and load the downloaded
.tb7file. - Create a new model or load an existing one on the loaded template.
- Build a Data Flow Diagram by dragging stencils onto the canvas, selecting the properties that match your system components, and connecting them with data flows.
- Switch to the Analysis View — the tool automatically generates SPARTA-mapped threats based on the diagram.
This template implements the methodology proposed in the following paper, which was presented at SpaceSec 2026 (4th Workshop on the Security of Space and Satellite Systems Co-located with the NDSS Symposium) and CYSAT Europe 2026:
Towards Automated Threat Modeling for Space Systems via SPARTA Matrix
Joonhyuk Park, Jiwon Kwak, Geunwoo Baek, Dohee Kang and Seungjoo Kim*
SpaceSec 2026, co-located with NDSS 2026, February 23, 2026, San Diego, CA, USA
This project is licensed under the MIT License.
- Joonhyuk Park — Korea University, School of Cybersecurity (peter990527@korea.ac.kr)
- Our Lab — Security Automation aNd Engineering Lab (SANE Lab)
- Link to short Survey - https://docs.google.com/forms/d/e/1FAIpQLSd6thG28_vddNuhwQ77xjJSMZ-slffw31CyKSXNZqogMCmdSw/viewform?usp=header