CAPEC-3000 - 공격 패턴 상세 정보 | CVE Find

이름: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

CAPEC 구성원

CAPEC-513: Software 카테고리

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

CAPEC-21: Exploitation of Trusted Identifiers 기본

CAPEC-22: Exploiting Trust in Client 기본

CAPEC-25: Forced Deadlock 기본

CAPEC-26: Leveraging Race Conditions 기본

CAPEC-28: Fuzzing 기본

CAPEC-74: Manipulating State 기본

CAPEC-94: Adversary in the Middle (AiTM) 기본

CAPEC-112: Brute Force 기본

CAPEC-113: Interface Manipulation 기본

CAPEC-114: Authentication Abuse 기본

CAPEC-115: Authentication Bypass 기본

CAPEC-116: Excavation 기본

CAPEC-117: Interception 기본

CAPEC-122: Privilege Abuse 기본

CAPEC-123: Buffer Manipulation 기본

CAPEC-124: Shared Resource Manipulation 기본

CAPEC-125: Flooding 기본

CAPEC-129: Pointer Manipulation 기본

CAPEC-130: Excessive Allocation 기본

CAPEC-131: Resource Leak Exposure 기본

CAPEC-137: Parameter Injection 기본

CAPEC-148: Content Spoofing 기본

CAPEC-151: Identity Spoofing 기본

CAPEC-153: Input Data Manipulation 기본

CAPEC-154: Resource Location Spoofing 기본

CAPEC-161: Infrastructure Manipulation 기본

CAPEC-165: File Manipulation 기본

CAPEC-169: Footprinting 기본

CAPEC-173: Action Spoofing 기본

CAPEC-175: Code Inclusion 기본

CAPEC-176: Configuration/Environment Manipulation 기본

CAPEC-184: Software Integrity Attack 기본

CAPEC-188: Reverse Engineering 기본

CAPEC-212: Functionality Misuse 기본

CAPEC-224: Fingerprinting 기본

CAPEC-227: Sustained Client Engagement 기본

CAPEC-233: Privilege Escalation 기본

CAPEC-240: Resource Injection 기본

CAPEC-242: Code Injection 기본

CAPEC-248: Command Injection 기본

CAPEC-272: Protocol Manipulation 기본

CAPEC-410: Information Elicitation 기본

CAPEC-438: Modification During Manufacture 기본

CAPEC-441: Malicious Logic Insertion 기본

CAPEC-548: Contaminate Resource 기본

CAPEC-549: Local Execution of Code 기본

CAPEC-554: Functionality Bypass 기본

CAPEC-560: Use of Known Domain Credentials 기본

CAPEC-586: Object Injection 기본

CAPEC-594: Traffic Injection 기본

CAPEC-607: Obstruction 기본

CAPEC-690: Metadata Spoofing 기본

CAPEC-515: Hardware 카테고리

CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.

CAPEC-26: Leveraging Race Conditions 기본

CAPEC-74: Manipulating State 기본

CAPEC-113: Interface Manipulation 기본

CAPEC-114: Authentication Abuse 기본

CAPEC-116: Excavation 기본

CAPEC-122: Privilege Abuse 기본

CAPEC-124: Shared Resource Manipulation 기본

CAPEC-148: Content Spoofing 기본

CAPEC-151: Identity Spoofing 기본

CAPEC-154: Resource Location Spoofing 기본

CAPEC-161: Infrastructure Manipulation 기본

CAPEC-176: Configuration/Environment Manipulation 기본

CAPEC-188: Reverse Engineering 기본

CAPEC-192: Protocol Analysis 기본

CAPEC-212: Functionality Misuse 기본

CAPEC-233: Privilege Escalation 기본

CAPEC-438: Modification During Manufacture 기본

CAPEC-439: Manipulation During Distribution 기본

CAPEC-440: Hardware Integrity Attack 기본

CAPEC-441: Malicious Logic Insertion 기본

CAPEC-548: Contaminate Resource 기본

CAPEC-560: Use of Known Domain Credentials 기본

CAPEC-607: Obstruction 기본

CAPEC-624: Hardware Fault Injection 기본

CAPEC-512: Communications 카테고리

CAPEC-512: Attack patterns within this category focus on the exploitation of communications and related protocols. The techniques defined by each pattern are used by an adversary to block, manipulate, and steal communications in an attempt to achieve a desired negative technical impact.

CAPEC-22: Exploiting Trust in Client 기본

CAPEC-94: Adversary in the Middle (AiTM) 기본

CAPEC-117: Interception 기본

CAPEC-125: Flooding 기본

CAPEC-130: Excessive Allocation 기본

CAPEC-148: Content Spoofing 기본

CAPEC-151: Identity Spoofing 기본

CAPEC-154: Resource Location Spoofing 기본

CAPEC-161: Infrastructure Manipulation 기본

CAPEC-169: Footprinting 기본

CAPEC-192: Protocol Analysis 기본

CAPEC-216: Communication Channel Manipulation 기본

CAPEC-240: Resource Injection 기본

CAPEC-272: Protocol Manipulation 기본

CAPEC-594: Traffic Injection 기본

CAPEC-607: Obstruction 기본

CAPEC-624: Hardware Fault Injection 기본

CAPEC-437: Supply Chain 카테고리

CAPEC-437: Attack patterns within this category focus on the disruption of the supply chain lifecycle by manipulating computer system hardware, software, or services for the purpose of espionage, theft of critical data or technology, or the disruption of mission-critical operations or infrastructure. Supply chain operations are usually multi-national with parts, components, assembly, and delivery occurring across multiple countries offering an attacker multiple points for disruption.

CAPEC-116: Excavation 기본

CAPEC-154: Resource Location Spoofing 기본

CAPEC-176: Configuration/Environment Manipulation 기본

CAPEC-184: Software Integrity Attack 기본

CAPEC-438: Modification During Manufacture 기본

CAPEC-439: Manipulation During Distribution 기본

CAPEC-440: Hardware Integrity Attack 기본

CAPEC-690: Metadata Spoofing 기본

CAPEC-403: Social Engineering 카테고리

CAPEC-403: Attack patterns within this category focus on the manipulation and exploitation of people. The techniques defined by each pattern are used to convince a target into performing actions or divulging confidential information that benefit the adversary, often resulting in access to computer systems or facilities. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access. In most cases, the adversary never comes face-to-face with the victim.

CAPEC-137: Parameter Injection 기본

CAPEC-151: Identity Spoofing 기본

CAPEC-154: Resource Location Spoofing 기본

CAPEC-173: Action Spoofing 기본

CAPEC-184: Software Integrity Attack 기본

CAPEC-410: Information Elicitation 기본

CAPEC-416: Manipulate Human Behavior 기본

CAPEC-607: Obstruction 기본

CAPEC-690: Metadata Spoofing 기본

CAPEC-514: Physical Security 카테고리

CAPEC-514: Attack patterns within this category focus on physical security. The techniques defined by each pattern are used to exploit weaknesses in the physical security of a system in an attempt to achieve a desired negative technical impact.

CAPEC-116: Excavation 기본

CAPEC-117: Interception 기본

CAPEC-188: Reverse Engineering 기본

CAPEC-390: Bypassing Physical Security 기본

CAPEC-440: Hardware Integrity Attack 기본

CAPEC-507: Physical Theft 기본

CAPEC-607: Obstruction 기본

CAPEC 정보

메모

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

제출

이름	조직	날짜	출시일
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

수정 사항

이름	조직	날짜	댓글
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Other_Notes