Detail Tampilan CAPEC-3000

CAPEC-3000

Domains of Attack
2014-06-23
00h00 +00:00
Draft
Graph
2018-07-31
00h00 +00:00
CAPEC Mitre.org
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Kelola notifikasi

Nama: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

Anggota CAPEC

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.
CAPEC-21: Exploitation of Trusted Identifiers Dasar
CAPEC-22: Exploiting Trust in Client Dasar
CAPEC-25: Forced Deadlock Dasar
CAPEC-26: Leveraging Race Conditions Dasar
CAPEC-28: Fuzzing Dasar
CAPEC-74: Manipulating State Dasar
CAPEC-94: Adversary in the Middle (AiTM) Dasar
CAPEC-112: Brute Force Dasar
CAPEC-113: Interface Manipulation Dasar
CAPEC-114: Authentication Abuse Dasar
CAPEC-115: Authentication Bypass Dasar
CAPEC-116: Excavation Dasar
CAPEC-117: Interception Dasar
CAPEC-122: Privilege Abuse Dasar
CAPEC-123: Buffer Manipulation Dasar
CAPEC-124: Shared Resource Manipulation Dasar
CAPEC-125: Flooding Dasar
CAPEC-129: Pointer Manipulation Dasar
CAPEC-130: Excessive Allocation Dasar
CAPEC-131: Resource Leak Exposure Dasar
CAPEC-137: Parameter Injection Dasar
CAPEC-148: Content Spoofing Dasar
CAPEC-151: Identity Spoofing Dasar
CAPEC-153: Input Data Manipulation Dasar
CAPEC-154: Resource Location Spoofing Dasar
CAPEC-161: Infrastructure Manipulation Dasar
CAPEC-165: File Manipulation Dasar
CAPEC-169: Footprinting Dasar
CAPEC-173: Action Spoofing Dasar
CAPEC-175: Code Inclusion Dasar
CAPEC-176: Configuration/Environment Manipulation Dasar
CAPEC-184: Software Integrity Attack Dasar
CAPEC-188: Reverse Engineering Dasar
CAPEC-212: Functionality Misuse Dasar
CAPEC-224: Fingerprinting Dasar
CAPEC-227: Sustained Client Engagement Dasar
CAPEC-233: Privilege Escalation Dasar
CAPEC-240: Resource Injection Dasar
CAPEC-242: Code Injection Dasar
CAPEC-248: Command Injection Dasar
CAPEC-272: Protocol Manipulation Dasar
CAPEC-410: Information Elicitation Dasar
CAPEC-438: Modification During Manufacture Dasar
CAPEC-441: Malicious Logic Insertion Dasar
CAPEC-548: Contaminate Resource Dasar
CAPEC-549: Local Execution of Code Dasar
CAPEC-554: Functionality Bypass Dasar
CAPEC-560: Use of Known Domain Credentials Dasar
CAPEC-586: Object Injection Dasar
CAPEC-594: Traffic Injection Dasar
CAPEC-607: Obstruction Dasar
CAPEC-690: Metadata Spoofing Dasar
CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.
CAPEC-26: Leveraging Race Conditions Dasar
CAPEC-74: Manipulating State Dasar
CAPEC-113: Interface Manipulation Dasar
CAPEC-114: Authentication Abuse Dasar
CAPEC-116: Excavation Dasar
CAPEC-122: Privilege Abuse Dasar
CAPEC-124: Shared Resource Manipulation Dasar
CAPEC-148: Content Spoofing Dasar
CAPEC-151: Identity Spoofing Dasar
CAPEC-154: Resource Location Spoofing Dasar
CAPEC-161: Infrastructure Manipulation Dasar
CAPEC-176: Configuration/Environment Manipulation Dasar
CAPEC-188: Reverse Engineering Dasar
CAPEC-192: Protocol Analysis Dasar
CAPEC-212: Functionality Misuse Dasar
CAPEC-233: Privilege Escalation Dasar
CAPEC-438: Modification During Manufacture Dasar
CAPEC-439: Manipulation During Distribution Dasar
CAPEC-440: Hardware Integrity Attack Dasar
CAPEC-441: Malicious Logic Insertion Dasar
CAPEC-548: Contaminate Resource Dasar
CAPEC-560: Use of Known Domain Credentials Dasar
CAPEC-607: Obstruction Dasar
CAPEC-624: Hardware Fault Injection Dasar

Informasi CAPEC

Catatan

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Pengajuan

Nama Organisasi Tanggal Tanggal rilis
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modifikasi

Nama Organisasi Tanggal Komentar
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Other_Notes
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.