CAPEC-3000 Ansichtsdetails

CAPEC-3000

Domains of Attack
Draft
Graph
2014-06-23
00h00 +00:00
2018-07-31
00h00 +00:00
CAPEC Mitre.org
Benachrichtigung für ein CAPEC
Bleiben Sie über alle Änderungen zu einem bestimmten CAPEC informiert.
Benachrichtigungen verwalten

Name: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

CAPEC-Mitglieder

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.
CAPEC-21: Exploitation of Trusted Identifiers Base
CAPEC-22: Exploiting Trust in Client Base
CAPEC-25: Forced Deadlock Base
CAPEC-26: Leveraging Race Conditions Base
CAPEC-28: Fuzzing Base
CAPEC-74: Manipulating State Base
CAPEC-94: Adversary in the Middle (AiTM) Base
CAPEC-112: Brute Force Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-115: Authentication Bypass Base
CAPEC-116: Excavation Base
CAPEC-117: Interception Base
CAPEC-122: Privilege Abuse Base
CAPEC-123: Buffer Manipulation Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-125: Flooding Base
CAPEC-129: Pointer Manipulation Base
CAPEC-130: Excessive Allocation Base
CAPEC-131: Resource Leak Exposure Base
CAPEC-137: Parameter Injection Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-153: Input Data Manipulation Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-165: File Manipulation Base
CAPEC-169: Footprinting Base
CAPEC-173: Action Spoofing Base
CAPEC-175: Code Inclusion Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-184: Software Integrity Attack Base
CAPEC-188: Reverse Engineering Base
CAPEC-212: Functionality Misuse Base
CAPEC-224: Fingerprinting Base
CAPEC-227: Sustained Client Engagement Base
CAPEC-233: Privilege Escalation Base
CAPEC-240: Resource Injection Base
CAPEC-242: Code Injection Base
CAPEC-248: Command Injection Base
CAPEC-272: Protocol Manipulation Base
CAPEC-410: Information Elicitation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-549: Local Execution of Code Base
CAPEC-554: Functionality Bypass Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-586: Object Injection Base
CAPEC-594: Traffic Injection Base
CAPEC-607: Obstruction Base
CAPEC-690: Metadata Spoofing Base
CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.
CAPEC-26: Leveraging Race Conditions Base
CAPEC-74: Manipulating State Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-116: Excavation Base
CAPEC-122: Privilege Abuse Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-188: Reverse Engineering Base
CAPEC-192: Protocol Analysis Base
CAPEC-212: Functionality Misuse Base
CAPEC-233: Privilege Escalation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-439: Manipulation During Distribution Base
CAPEC-440: Hardware Integrity Attack Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-607: Obstruction Base
CAPEC-624: Hardware Fault Injection Base

CAPEC-Informationen

Hinweise

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Einreichung

Name Organisation Datum Veröffentlichungsdatum
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Änderungen

Name Organisation Datum Kommentar
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Other_Notes
Die auf CVE Find präsentierten Informationen stammen aus mehreren sorgfältig ausgewählten Referenzquellen. CVE-Daten werden von der MITRE Corporation und der National Vulnerability Database (NVD) bereitgestellt. Der Katalog bekannter ausgenutzter Schwachstellen (KEV) stammt von der Cybersecurity and Infrastructure Security Agency (CISA), während EPSS-Scores von FIRST.org kommen. Darüber hinaus werden Daten zu Software-Schwachstellen (CWE) und häufigen Angriffsmustern (CAPEC) von der MITRE Corporation gepflegt, und Informationen zu Hardware- und Software-Konfigurationen (CPE) werden von der NVD bereitgestellt.