Accessibility has enlarged the security threats in modern space communication network, various authentication and encryption solutions are to be considered and tested for possible adoption in the space context, based on widely used space link protocols. As adopted authentication mechanism andARQ characteristic of COP-1 are both error sensitive, most of the solutions proposed previously are designed oblivious of the protocol misbehavior distinguish between attack and normal interference in space channel. An innovative misbehavior detection algorithm is proposed for CCSDS TC systems, to address this problem with a hypothesis test approach based on the model of attackers behavior and space fading channel. The simulation results show the proposed algorithm can detect the attack behavior successfully and without false alarm, when facing malicious security attacks against TC transmissions towards the spacecraft.