Reference card.

Downloads ▾
STIX 2.1 bundle TAXII 2.1 envelope CSV 30 elements XLSX workbook JSON machinetag v2
← Back to course
TLP:GREEN Limited Disclosure · SCORP² community members only
Exported by: verifying identity… Exported at: …
Distribution notice. This document is for active SCORP² community members only. Unauthorized distribution will result in revocation of community membership.

METEORSTORM Data Model

Taxonomic Element Nomenclature (TEN) reference

This is the METEORSTORM TEN data model: five layers defining 30 taxonomic elements, each named by a Taxonomic Element Nomenclature (TEN) that carries its published definition. The verbatim rule below governs every definition.

METEORSTORM Data Model Fields

Layer
The layer the element belongs to: PCE, SEG, SVC, AST, or AN.
Tag
The published tag for the element within its layer, for example OR.
Label
The published name that corresponds to the tag, for example Orbital.
Definition
The published definition for the element, quoted verbatim.

Select any element below to reveal its full nomenclature. To name one real occurrence on your platform, switch to the colon ETEN nomenclature in the companion ETEN reference.

Verbatim rule. Every definition in the tables below is the published METEORSTORM taxonomy text, quoted exactly. On this platform an element definition is never abbreviated, paraphrased, or reworded. When you need to describe how an element applies to your actual system, that is the job of the ETEN, not an edit to the definition.
METEORSTORM Data Model L1 · PCE · Primary Capability Environment  ·  the WHERE “Operational zone in which a capability primarily exists or is exercised.” Five environment elements · no parent; the top of the decomposition. PCE-TE Terrestrial Environment PCE-AQ Aquatic Environment PCE-AE Aerial Environment PCE-OR Orbital Environment PCE-DS Deep Space Environment L2 · SEG · Segment  ·  the ENCLAVE “Service and asset enclaves that compose the system across environments.” Ten segment elements · each names a PCE parent. SEG-LA Launch SEG-LI Link SEG-GR Ground SEG-US User SEG-AQ Aquatic SEG-LO Low Altitude SEG-HI High Altitude SEG-NE Near Space SEG-SP Space SEG-DE Deep Space L3 · SVC · Service  ·  the FUNCTIONAL PLANE “Functional planes that organize control and data responsibilities.” Three service elements · each names a SEG parent. SVC-CP Control Plane SVC-DP Data Plane SVC-HY Hybrid Service L4 · AST · Asset  ·  the BUILDING BLOCK “Asset classes composing the system and its interfaces.” Six asset classes · each names an SVC parent. AST-HW Hardware Asset AST-FW Firmware Asset AST-SW Software Asset AST-DA Data Asset AST-SI Signal Asset AST-HY Hybrid Asset DECOMPOSE · PCE to AST NAMES ITS PARENT · no orphans

L1Primary Capability Environment (PCE)

Predicate: “Operational zone in which a capability primarily exists or is exercised.” The WHERE, the zone. PCE elements have no parent; they are the top of the decomposition.

Terrestrial Environment
TEN nomenclaturePCE-TE-Terrestrial Environment-Surface-based operational zones on planetary bodies.
Layer
PCE Primary Capability Environment (L1)
Tag
TE
Label
Terrestrial Environment
Definition
Surface-based operational zones on planetary bodies.
Aquatic Environment
TEN nomenclaturePCE-AQ-Aquatic Environment-Water-based operational zones, including but not limited to Earth's maritime domains.
Layer
PCE Primary Capability Environment (L1)
Tag
AQ
Label
Aquatic Environment
Definition
Water-based operational zones, including but not limited to Earth's maritime domains.
Aerial Environment
TEN nomenclaturePCE-AE-Aerial Environment-Atmospheric operational zones spanning lower, upper, and near-space regions.
Layer
PCE Primary Capability Environment (L1)
Tag
AE
Label
Aerial Environment
Definition
Atmospheric operational zones spanning lower, upper, and near-space regions.
Orbital Environment
TEN nomenclaturePCE-OR-Orbital Environment-Operational zones within planetary or satellite orbits.
Layer
PCE Primary Capability Environment (L1)
Tag
OR
Label
Orbital Environment
Definition
Operational zones within planetary or satellite orbits.
Deep Space Environment
TEN nomenclaturePCE-DS-Deep Space Environment-Operational zones beyond planetary orbital regimes.
Layer
PCE Primary Capability Environment (L1)
Tag
DS
Label
Deep Space Environment
Definition
Operational zones beyond planetary orbital regimes.

L2Segment (SEG)

Predicate: “Service and asset enclaves that compose the system across environments.” The ENCLAVE of services and assets. Every SEG names its PCE parent.

Launch
TEN nomenclatureSEG-LA-Launch-Surface-based services and assets for primary launch operations.
Layer
SEG Segment (L2)
Tag
LA
Label
Launch
Definition
Surface-based services and assets for primary launch operations.
Link
TEN nomenclatureSEG-LI-Link-Services and assets enabling platform communications across signal paths.
Layer
SEG Segment (L2)
Tag
LI
Label
Link
Definition
Services and assets enabling platform communications across signal paths.
Ground
TEN nomenclatureSEG-GR-Ground-Surface-based services and assets for primary platform operations, serving as the primary locus of control plane activity.
Layer
SEG Segment (L2)
Tag
GR
Label
Ground
Definition
Surface-based services and assets for primary platform operations, serving as the primary locus of control plane activity.
User
TEN nomenclatureSEG-US-User-Services and assets for primary end-user operations.
Layer
SEG Segment (L2)
Tag
US
Label
User
Definition
Services and assets for primary end-user operations.
Aquatic
TEN nomenclatureSEG-AQ-Aquatic-Water-based services and assets for primary platform operations, not limited to Earth's maritime domains.
Layer
SEG Segment (L2)
Tag
AQ
Label
Aquatic
Definition
Water-based services and assets for primary platform operations, not limited to Earth's maritime domains.
Low Altitude
TEN nomenclatureSEG-LO-Low Altitude-Aerial services and assets in the lower atmosphere.
Layer
SEG Segment (L2)
Tag
LO
Label
Low Altitude
Definition
Aerial services and assets in the lower atmosphere.
High Altitude
TEN nomenclatureSEG-HI-High Altitude-Aerial services and assets above the lower atmosphere but below near space.
Layer
SEG Segment (L2)
Tag
HI
Label
High Altitude
Definition
Aerial services and assets above the lower atmosphere but below near space.
Near Space
TEN nomenclatureSEG-NE-Near Space-Aerial services and assets above high altitude and below orbital regions.
Layer
SEG Segment (L2)
Tag
NE
Label
Near Space
Definition
Aerial services and assets above high altitude and below orbital regions.
Space
TEN nomenclatureSEG-SP-Space-Services and assets operating in planetary or satellite orbits.
Layer
SEG Segment (L2)
Tag
SP
Label
Space
Definition
Services and assets operating in planetary or satellite orbits.
Deep Space
TEN nomenclatureSEG-DE-Deep Space-Services and assets operating beyond planetary orbital regimes.
Layer
SEG Segment (L2)
Tag
DE
Label
Deep Space
Definition
Services and assets operating beyond planetary orbital regimes.

L3Service (SVC)

Predicate: “Functional planes that organize control and data responsibilities.” The functional PLANE. Every SVC names its SEG parent.

Control Plane
TEN nomenclatureSVC-CP-Control Plane-Services for managing and orchestrating platform control functions.
Layer
SVC Service (L3)
Tag
CP
Label
Control Plane
Definition
Services for managing and orchestrating platform control functions.
Data Plane
TEN nomenclatureSVC-DP-Data Plane-Services for managing and orchestrating mission product functions.
Layer
SVC Service (L3)
Tag
DP
Label
Data Plane
Definition
Services for managing and orchestrating mission product functions.
Hybrid Service
TEN nomenclatureSVC-HY-Hybrid Service-Services integrating both control and data plane functionalities.
Layer
SVC Service (L3)
Tag
HY
Label
Hybrid Service
Definition
Services integrating both control and data plane functionalities.

L4Asset (AST)

Predicate: “Asset classes composing the system and its interfaces.” The building-block COMPONENT. Every AST names its SVC parent.

Hardware Asset
TEN nomenclatureAST-HW-Hardware Asset-Physical components supporting platform operations.
Layer
AST Asset (L4)
Tag
HW
Label
Hardware Asset
Definition
Physical components supporting platform operations.
Firmware Asset
TEN nomenclatureAST-FW-Firmware Asset-Embedded control code governing hardware functions.
Layer
AST Asset (L4)
Tag
FW
Label
Firmware Asset
Definition
Embedded control code governing hardware functions.
Software Asset
TEN nomenclatureAST-SW-Software Asset-Applications and logic executing operational tasks.
Layer
AST Asset (L4)
Tag
SW
Label
Software Asset
Definition
Applications and logic executing operational tasks.
Data Asset
TEN nomenclatureAST-DA-Data Asset-Information generated, processed, or consumed by the platform.
Layer
AST Asset (L4)
Tag
DA
Label
Data Asset
Definition
Information generated, processed, or consumed by the platform.
Signal Asset
TEN nomenclatureAST-SI-Signal Asset-Communication channels and transmission frequencies.
Layer
AST Asset (L4)
Tag
SI
Label
Signal Asset
Definition
Communication channels and transmission frequencies.
Hybrid Asset
TEN nomenclatureAST-HY-Hybrid Asset-Composite elements combining multiple asset types.
Layer
AST Asset (L4)
Tag
HY
Label
Hybrid Asset
Definition
Composite elements combining multiple asset types.
METEORSTORM Data Model L5 · AN · Analytic  ·  the FINDINGS “Analytic constructs for threat, detection, and resilience.” Six analytic elements · no parent; each carries a target field. AN-IOC Indicator of Compromise AN-IOA Indicator of Attack AN-ATT Attack Path AN-THR Threat AN-DET Detection Signature AN-RES Resilience Measure TOE Target of Exploitation TDM Target of Detection Method TRE Target of Resilience Enhancement PLATFORM ELEMENTS PCE · SEG · SVC · AST A target may name any platform element, the environment included; it never names another enrichment element.

L5Analytic (AN)

Predicate: “Analytic constructs for threat, detection, and resilience.” The ENRICHMENT layer. Every AN element is an enrichment element; it anchors to the platform element it concerns through its target field.

METEORSTORM Data Model Fields

TOE
Target of Exploitation. Carried by Attack Path, Indicator of Compromise, Indicator of Attack, and Threat; names the platform elements the adversary activity is directed at.
TDM
Target of Detection Method. Carried by Detection Signature; names the platform elements the signature observes.
TRE
Target of Resilience Enhancement. Carried by Resilience Measure; names the platform elements the measure protects.

The target field is fixed by the element; it is never chosen freely. It references platform elements in any layer, PCE, SEG, SVC, or AST, so a threat can anchor to the environment itself; it never references another enrichment element.

Indicator of Compromise
TEN nomenclatureAN-IOC-Indicator of Compromise-Confirmed indication that a converged space system has been compromised.
Layer
AN Analytic (L5)
Tag
IOC
Label
Indicator of Compromise
Definition
Confirmed indication that a converged space system has been compromised.
Target
TOE Target of Exploitation
Indicator of Attack
TEN nomenclatureAN-IOA-Indicator of Attack-Confirmed indication that a converged space system has been attacked.
Layer
AN Analytic (L5)
Tag
IOA
Label
Indicator of Attack
Definition
Confirmed indication that a converged space system has been attacked.
Target
TOE Target of Exploitation
Attack Path
TEN nomenclatureAN-ATT-Attack Path-Confirmed attack path for a converged space system.
Layer
AN Analytic (L5)
Tag
ATT
Label
Attack Path
Definition
Confirmed attack path for a converged space system.
Target
TOE Target of Exploitation
Threat
TEN nomenclatureAN-THR-Threat-Confirmed and active threat against a converged space system.
Layer
AN Analytic (L5)
Tag
THR
Label
Threat
Definition
Confirmed and active threat against a converged space system.
Target
TOE Target of Exploitation
Detection Signature
TEN nomenclatureAN-DET-Detection Signature-Validated and operational pattern, signal, or logic that triggers on contextualized threat behavior for a converged space system.
Layer
AN Analytic (L5)
Tag
DET
Label
Detection Signature
Definition
Validated and operational pattern, signal, or logic that triggers on contextualized threat behavior for a converged space system.
Target
TDM Target of Detection Method
Resilience Measure
TEN nomenclatureAN-RES-Resilience Measure-Validated and operational protective capability ensuring converged space system resistance or recovery from confirmed threats.
Layer
AN Analytic (L5)
Tag
RES
Label
Resilience Measure
Definition
Validated and operational protective capability ensuring converged space system resistance or recovery from confirmed threats.
Target
TRE Target of Resilience Enhancement
Enumeration. This card carries the taxonomy and ontology of the METEORSTORM data model. Enumerating a platform against it produces the ETEN record: each element named with an ordinal and a description. The companion ETEN reference applies all five layers to the Kestrel Orbital Day-1 CONOPS: a tailored enumeration of 55 elements scoped to the telecommand path under Function 01, Concept of Operations, not the whole platform.