CAPEC-422
Influence Perception of Commitment and Consistency
2014-06-23
00h00 +00:00
00h00 +00:00
特定のCAPECのアラート
特定のCAPECの変更情報をいち早くお届けします。
CAPEC の説明
An adversary uses social engineering to convince the target to do minor tasks as opposed to larger actions. After complying with a request, individuals are more likely to agree to subsequent requests that are similar in type and required effort.
CAPEC の情報
前提条件
The adversary must have the means and knowledge of how to communicate with the target in some manner.必要なスキル
The adversary requires strong inter-personal and communication skills.必要なリソース
None: No specialized resources are required to execute this type of attack.緩和策
An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.Individuals should avoid complying with suspicious requests.
参考文献
REF-348
The Official Social Engineering Portalhttp://www.social-engineer.org
登録情報
| 名前 | 組織 | 日付 | リリース日 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
変更履歴
| 名前 | 組織 | 日付 | コメント |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Description Summary, Methods_of_Attack, References, Related_Attack_Patterns, Resources_Required, Solutions_and_Mitigations, Typical_Likelihood_of_Exploit | |
| CAPEC Content Team | The MITRE Corporation | Updated Mitigations |
