Détail de la vue CAPEC-703

CAPEC-703

Industrial Control System (ICS) Patterns
Draft
Explicit
2023-01-24
00h00 +00:00
CAPEC Mitre.org
Alerte pour un CAPEC
Restez informé de toutes modifications pour un CAPEC spécifique.
Gestion des notifications

Nom: Industrial Control System (ICS) Patterns

This view contains a listing of CAPECs that apply to industrial control systems (ICS). Some children of these attack patterns might also be applicable.

Membres CAPEC

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs Base

CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data Base

CAPEC-65: Sniff Application Code Base

CAPEC-70: Try Common or Default Usernames and Passwords Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-98: Phishing Base

CAPEC-125: Flooding Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-141: Cache Poisoning Base

CAPEC-148: Content Spoofing Base

CAPEC-158: Sniffing Network Traffic Base

CAPEC-163: Spear Phishing Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-177: Create files with the same name as files protected with a higher classification Base

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels Base

CAPEC-184: Software Integrity Attack Base

CAPEC-191: Read Sensitive Constants Within an Executable Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-268: Audit Log Manipulation Base

CAPEC-292: Host Discovery Base

CAPEC-309: Network Topology Mapping Base

CAPEC-312: Active OS Fingerprinting Base

CAPEC-313: Passive OS Fingerprinting Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-457: USB Memory Attacks Base

CAPEC-473: Signature Spoof Base

CAPEC-504: Task Impersonation Base

CAPEC-540: Overread Buffers Base

CAPEC-547: Physical Destruction of Device or Component Base

CAPEC-552: Install Rootkit Base

CAPEC-555: Remote Services with Stolen Credentials Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-573: Process Footprinting Base

CAPEC-580: System Footprinting Base

CAPEC-603: Blockage Base

CAPEC-607: Obstruction Base

CAPEC-635: Alternative Execution Due to Deceptive Filenames Base

CAPEC-648: Collect Data from Screen Capture Base

CAPEC-649: Adding a Space to a File Extension Base

CAPEC-690: Metadata Spoofing Base

CAPEC-691: Spoof Open-Source Software Metadata Base

CAPEC-692: Spoof Version Control System Commit Metadata Base

Informations du CAPEC

Notes

This view was created in part by utilizing the ATT&CK ICS Matrix [REF-752].

Soumission

Nom Organisation Date Date de publication
CAPEC Content Team The MITRE Corporation 2023-01-24 +00:00

Références

REF-752

ATT&CK ICS
https://attack.mitre.org/matrices/ics/
Les informations affichées sur CVE Find proviennent de plusieurs sources de référence rigoureusement sélectionnées. Les données CVE sont fournies par MITRE Corporation et la National Vulnerability Database (NVD). Le catalogue des vulnérabilités activement exploitées (KEV) provient de la Cybersecurity and Infrastructure Security Agency (CISA), tandis que les scores EPSS sont issus de FIRST.org. Enfin, les données relatives aux faiblesses logicielles (CWE) et aux schémas d'attaque courants (CAPEC) sont maintenues par MITRE Corporation, et les informations sur les configurations logicielles et matérielles (CPE) proviennent du NVD.