Szczegóły widoku CAPEC-3000

CAPEC-3000

Domains of Attack
Draft
Graph
2014-06-23
00h00 +00:00
2018-07-31
00h00 +00:00
CAPEC Mitre.org
Alert dla konkretnego CAPEC
Bądź na bieżąco z wszelkimi zmianami dotyczącymi konkretnego CAPEC.
Zarządzaj powiadomieniami

Nazwa: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

Członkowie CAPEC

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.
CAPEC-21: Exploitation of Trusted Identifiers Base
CAPEC-22: Exploiting Trust in Client Base
CAPEC-25: Forced Deadlock Base
CAPEC-26: Leveraging Race Conditions Base
CAPEC-28: Fuzzing Base
CAPEC-74: Manipulating State Base
CAPEC-94: Adversary in the Middle (AiTM) Base
CAPEC-112: Brute Force Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-115: Authentication Bypass Base
CAPEC-116: Excavation Base
CAPEC-117: Interception Base
CAPEC-122: Privilege Abuse Base
CAPEC-123: Buffer Manipulation Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-125: Flooding Base
CAPEC-129: Pointer Manipulation Base
CAPEC-130: Excessive Allocation Base
CAPEC-131: Resource Leak Exposure Base
CAPEC-137: Parameter Injection Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-153: Input Data Manipulation Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-165: File Manipulation Base
CAPEC-169: Footprinting Base
CAPEC-173: Action Spoofing Base
CAPEC-175: Code Inclusion Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-184: Software Integrity Attack Base
CAPEC-188: Reverse Engineering Base
CAPEC-212: Functionality Misuse Base
CAPEC-224: Fingerprinting Base
CAPEC-227: Sustained Client Engagement Base
CAPEC-233: Privilege Escalation Base
CAPEC-240: Resource Injection Base
CAPEC-242: Code Injection Base
CAPEC-248: Command Injection Base
CAPEC-272: Protocol Manipulation Base
CAPEC-410: Information Elicitation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-549: Local Execution of Code Base
CAPEC-554: Functionality Bypass Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-586: Object Injection Base
CAPEC-594: Traffic Injection Base
CAPEC-607: Obstruction Base
CAPEC-690: Metadata Spoofing Base
CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.
CAPEC-26: Leveraging Race Conditions Base
CAPEC-74: Manipulating State Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-116: Excavation Base
CAPEC-122: Privilege Abuse Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-188: Reverse Engineering Base
CAPEC-192: Protocol Analysis Base
CAPEC-212: Functionality Misuse Base
CAPEC-233: Privilege Escalation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-439: Manipulation During Distribution Base
CAPEC-440: Hardware Integrity Attack Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-607: Obstruction Base
CAPEC-624: Hardware Fault Injection Base

Informacje CAPEC

Notatki

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Zgłoszenie

Nazwa Organizacja Data Data wydania
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modyfikacje

Nazwa Organizacja Data Komentarz
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Other_Notes
Informacje prezentowane na CVE Find pochodzą z kilku starannie wybranych źródeł referencyjnych. Dane CVE są dostarczane przez MITRE Corporation i Narodową Bazę Podatności (NVD). Katalog znanych eksploatowanych podatności (KEV) pochodzi z Agencji ds. Bezpieczeństwa Cyberprzestrzeni i Infrastruktury (CISA), natomiast wyniki EPSS pochodzą z FIRST.org. Ponadto dane dotyczące słabości oprogramowania (CWE) i typowych wzorców ataków (CAPEC) są utrzymywane przez MITRE Corporation, a informacje o konfiguracjach sprzętu i oprogramowania (CPE) są dostarczane przez NVD.