CAPEC 설명

An adversary uses a social engineering technique to convey a sense of authority that motivates the target to reveal specific information or take specific action. There are various techniques for producing a sense of authority during ordinary modes of communication. One common method is impersonation. By impersonating someone with a position of power within an organization, an adversary may motivate the target individual to reveal some piece of sensitive information or perform an action that benefits the adversary.

CAPEC 정보

사전 조건

The adversary must have the means and knowledge of how to communicate with the target in some manner.

필요 기술

The adversary requires strong inter-personal and communication skills.

필요 리소스

None: No specialized resources are required to execute this type of attack.

완화 방법

An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.

참고 자료

REF-348

The Official Social Engineering Portal
http://www.social-engineer.org

제출

이름	조직	날짜	출시일
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

수정 사항

이름	조직	날짜	댓글
CAPEC Content Team	The MITRE Corporation	2017-08-04 +00:00	Updated Attack_Motivation-Consequences, Attack_Prerequisites, Attacker_Skills_or_Knowledge_Required, Description Summary, Examples-Instances, Methods_of_Attack, Related_Attack_Patterns, Resources_Required, Solutions_and_Mitigations, Typical_Likelihood_of_Exploit
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Description Summary
CAPEC Content Team	The MITRE Corporation	2020-07-30 +00:00	Updated Example_Instances

CAPEC-421 상세 정보

CAPEC-421