Detail Tampilan CAPEC-703

CAPEC-703

Industrial Control System (ICS) Patterns
2023-01-24
00h00 +00:00
Draft
Explicit
CAPEC Mitre.org
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Kelola notifikasi

Nama: Industrial Control System (ICS) Patterns

This view contains a listing of CAPECs that apply to industrial control systems (ICS). Some children of these attack patterns might also be applicable.

Anggota CAPEC

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs Dasar

CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data Dasar

CAPEC-65: Sniff Application Code Dasar

CAPEC-70: Try Common or Default Usernames and Passwords Dasar

CAPEC-94: Adversary in the Middle (AiTM) Dasar

CAPEC-98: Phishing Dasar

CAPEC-125: Flooding Dasar

CAPEC-130: Excessive Allocation Dasar

CAPEC-131: Resource Leak Exposure Dasar

CAPEC-141: Cache Poisoning Dasar

CAPEC-148: Content Spoofing Dasar

CAPEC-158: Sniffing Network Traffic Dasar

CAPEC-163: Spear Phishing Dasar

CAPEC-165: File Manipulation Dasar

CAPEC-169: Footprinting Dasar

CAPEC-177: Create files with the same name as files protected with a higher classification Dasar

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels Dasar

CAPEC-184: Software Integrity Attack Dasar

CAPEC-191: Read Sensitive Constants Within an Executable Dasar

CAPEC-227: Sustained Client Engagement Dasar

CAPEC-268: Audit Log Manipulation Dasar

CAPEC-292: Host Discovery Dasar

CAPEC-309: Network Topology Mapping Dasar

CAPEC-312: Active OS Fingerprinting Dasar

CAPEC-313: Passive OS Fingerprinting Dasar

CAPEC-438: Modification During Manufacture Dasar

CAPEC-439: Manipulation During Distribution Dasar

CAPEC-441: Malicious Logic Insertion Dasar

CAPEC-457: USB Memory Attacks Dasar

CAPEC-473: Signature Spoof Dasar

CAPEC-504: Task Impersonation Dasar

CAPEC-540: Overread Buffers Dasar

CAPEC-547: Physical Destruction of Device or Component Dasar

CAPEC-552: Install Rootkit Dasar

CAPEC-555: Remote Services with Stolen Credentials Dasar

CAPEC-560: Use of Known Domain Credentials Dasar

CAPEC-573: Process Footprinting Dasar

CAPEC-580: System Footprinting Dasar

CAPEC-603: Blockage Dasar

CAPEC-607: Obstruction Dasar

CAPEC-635: Alternative Execution Due to Deceptive Filenames Dasar

CAPEC-648: Collect Data from Screen Capture Dasar

CAPEC-649: Adding a Space to a File Extension Dasar

CAPEC-690: Metadata Spoofing Dasar

CAPEC-691: Spoof Open-Source Software Metadata Dasar

CAPEC-692: Spoof Version Control System Commit Metadata Dasar

Informasi CAPEC

Catatan

This view was created in part by utilizing the ATT&CK ICS Matrix [REF-752].

Pengajuan

Nama Organisasi Tanggal Tanggal rilis
CAPEC Content Team The MITRE Corporation 2023-01-24 +00:00

Referensi

REF-752

ATT&CK ICS
https://attack.mitre.org/matrices/ics/
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.