CAPEC 설명

An attacker provides a counterfeit component during the procurement process of a lower-tier component supplier to a sub-system developer or integrator, which is then built into the system being upgraded or repaired by the victim, allowing the attacker to cause disruption or additional compromise.

CAPEC 정보

사전 조건

Advanced knowledge about the target system and sub-components.

필요 기술

Able to develop and manufacture malicious system components that resemble legitimate name-brand components.

완화 방법

There are various methods to detect if the component is a counterfeit. See section II of [REF-703] for many techniques.

참고 자료

REF-439

Supply Chain Attack Framework and Attack Patterns
John F. Miller.
http://www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf

REF-698

Combating Counterfeit Components in the DoD Supply Chain
Paul Wagner.
https://dsiac.org/articles/combating-counterfeit-components-in-the-dod-supply-chain/

REF-703

Counterfeit Integrated Circuits: A Rising Threat in the Global Semiconductor Supply Chain
Ujjwal Guin, Ke Huang, Daniel DiMase, John M. Carulli, Jr., Mohammad Tehranipoor, Yiorgos Makris.
https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=6856206

제출

이름	조직	날짜	출시일
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

수정 사항

이름	조직	날짜	댓글
CAPEC Content Team	The MITRE Corporation	2015-11-09 +00:00	Updated Related_Attack_Patterns, Typical_Likelihood_of_Exploit
CAPEC Content Team	The MITRE Corporation	2022-02-22 +00:00	Updated Mitigations, References

CAPEC-530 상세 정보

CAPEC-530