CAPEC-690
Metadata Spoofing
2022-09-29
00h00 +00:00
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
CAPEC 정보
사전 조건
Identification of a resource whose metadata is to be spoofed필요 기술
Ability to spoof a variety of metadata to convince victims the source is trusted완화 방법
Validate metadata of resources such as authors, timestamps, and statistics.Confirm the pedigree of open source packages and ensure the code being downloaded does not originate from another source.
Even if the metadata is properly checked and a user believes it to be legitimate, there may still be a chance that they've been duped. Therefore, leverage automated testing techniques to determine where malicious areas of the code may exist.
제출
| 이름 | 조직 | 날짜 | 출시일 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
