CAPEC の情報
前提条件
Identification of a resource whose metadata is to be spoofed必要なスキル
Ability to spoof a variety of metadata to convince victims the source is trusted緩和策
Validate metadata of resources such as authors, timestamps, and statistics.Confirm the pedigree of open source packages and ensure the code being downloaded does not originate from another source.
Even if the metadata is properly checked and a user believes it to be legitimate, there may still be a chance that they've been duped. Therefore, leverage automated testing techniques to determine where malicious areas of the code may exist.
登録情報
| 名前 | 組織 | 日付 | リリース日 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
