Detalle de vista CAPEC-3000

CAPEC-3000

Domains of Attack
Draft
Graph
2014-06-23
00h00 +00:00
2018-07-31
00h00 +00:00
CAPEC Mitre.org
Alerta para un CAPEC
Manténgase informado sobre cualquier cambio en un CAPEC específico.
Gestionar notificaciones

Nombre: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

Miembros CAPEC

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.
CAPEC-21: Exploitation of Trusted Identifiers Base
CAPEC-22: Exploiting Trust in Client Base
CAPEC-25: Forced Deadlock Base
CAPEC-26: Leveraging Race Conditions Base
CAPEC-28: Fuzzing Base
CAPEC-74: Manipulating State Base
CAPEC-94: Adversary in the Middle (AiTM) Base
CAPEC-112: Brute Force Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-115: Authentication Bypass Base
CAPEC-116: Excavation Base
CAPEC-117: Interception Base
CAPEC-122: Privilege Abuse Base
CAPEC-123: Buffer Manipulation Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-125: Flooding Base
CAPEC-129: Pointer Manipulation Base
CAPEC-130: Excessive Allocation Base
CAPEC-131: Resource Leak Exposure Base
CAPEC-137: Parameter Injection Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-153: Input Data Manipulation Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-165: File Manipulation Base
CAPEC-169: Footprinting Base
CAPEC-173: Action Spoofing Base
CAPEC-175: Code Inclusion Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-184: Software Integrity Attack Base
CAPEC-188: Reverse Engineering Base
CAPEC-212: Functionality Misuse Base
CAPEC-224: Fingerprinting Base
CAPEC-227: Sustained Client Engagement Base
CAPEC-233: Privilege Escalation Base
CAPEC-240: Resource Injection Base
CAPEC-242: Code Injection Base
CAPEC-248: Command Injection Base
CAPEC-272: Protocol Manipulation Base
CAPEC-410: Information Elicitation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-549: Local Execution of Code Base
CAPEC-554: Functionality Bypass Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-586: Object Injection Base
CAPEC-594: Traffic Injection Base
CAPEC-607: Obstruction Base
CAPEC-690: Metadata Spoofing Base
CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.
CAPEC-26: Leveraging Race Conditions Base
CAPEC-74: Manipulating State Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-116: Excavation Base
CAPEC-122: Privilege Abuse Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-188: Reverse Engineering Base
CAPEC-192: Protocol Analysis Base
CAPEC-212: Functionality Misuse Base
CAPEC-233: Privilege Escalation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-439: Manipulation During Distribution Base
CAPEC-440: Hardware Integrity Attack Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-607: Obstruction Base
CAPEC-624: Hardware Fault Injection Base

Informaciones CAPEC

Notas

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Envío

Nombre Organización Fecha Fecha de lanzamiento
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modificaciones

Nombre Organización Fecha Comentario
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Other_Notes
La información presentada en CVE Find proviene de varias fuentes de referencia cuidadosamente seleccionadas. Los datos CVE son proporcionados por MITRE Corporation y la Base de Datos Nacional de Vulnerabilidades (NVD). El catálogo de Vulnerabilidades Explotadas Conocidas (KEV) proviene de la Agencia de Seguridad de Infraestructura y Ciberseguridad (CISA), mientras que las puntuaciones EPSS provienen de FIRST.org. Además, los datos sobre debilidades de software (CWE) y patrones de ataque comunes (CAPEC) son mantenidos por MITRE Corporation, y la información sobre configuraciones de hardware y software (CPE) es proporcionada por la NVD.