CAPEC 설명

An adversary introduces malicious hardware during an update or replacement procedure, allowing for additional compromise or site disruption at the victim location. After deployment, it is not uncommon for upgrades and replacements to occur involving hardware and various replaceable parts. These upgrades and replacements are intended to correct defects, provide additional features, and to replace broken or worn-out parts. However, by forcing or tricking the replacement of a good component with a defective or corrupted component, an adversary can leverage known defects to obtain a desired malicious impact.

CAPEC 정보

필요 기술

Able to develop and manufacture malicious hardware components that perform the same functions and processes as their non-malicious counterparts.

참고 자료

REF-439

Supply Chain Attack Framework and Attack Patterns
John F. Miller.
http://www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf

REF-711

Shattered Trust: When Replacement Smartphone Components Attack
Omer Shwartz, Amir Cohen, Asaf Shabtai, Yossi Oren.
https://www.usenix.org/system/files/conference/woot17/woot17-paper-shwartz.pdf

제출

이름	조직	날짜	출시일
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

수정 사항

이름	조직	날짜	댓글
CAPEC Content Team	The MITRE Corporation	2015-11-09 +00:00	Updated Attack_Prerequisites, Description Summary, Typical_Likelihood_of_Exploit
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Description Summary, Examples-Instances
CAPEC Content Team	The MITRE Corporation	2022-02-22 +00:00	Updated References

CAPEC-534 상세 정보

CAPEC-534