CAPEC-539
ASIC With Malicious Functionality
2014-06-23
00h00 +00:00
00h00 +00:00
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Deskripsi CAPEC
An attacker with access to the development environment process of an application-specific integrated circuit (ASIC) for a victim system being developed or maintained after initial deployment can insert malicious functionality into the system for the purpose of disruption or further compromise.
Informasi CAPEC
Prasyarat
The attacker must have working knowledge of some if not all of the components involved in the target system as well as the infrastructure and development environment of the manufacturer.Advanced knowledge about the ASIC installed within the target system.
Keahlian yang Diperlukan
Able to develop and manufacture malicious subroutines for an ASIC environment without degradation of existing functions and processes.Referensi
REF-439
Supply Chain Attack Framework and Attack PatternsJohn F. Miller.
http://www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns, Typical_Likelihood_of_Exploit | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns | |
| CAPEC Content Team | The MITRE Corporation | Updated Taxonomy_Mappings |
