CAPEC-3000 Detalhe da Visão

CAPEC-3000

Domains of Attack
Draft
Graph
2014-06-23
00h00 +00:00
2018-07-31
00h00 +00:00
CAPEC Mitre.org
Alerta para um CAPEC
Fique informado sobre quaisquer alterações para um CAPEC específico.
Gerenciar notificações

Nome: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

Membros CAPEC

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.
CAPEC-21: Exploitation of Trusted Identifiers Base
CAPEC-22: Exploiting Trust in Client Base
CAPEC-25: Forced Deadlock Base
CAPEC-26: Leveraging Race Conditions Base
CAPEC-28: Fuzzing Base
CAPEC-74: Manipulating State Base
CAPEC-94: Adversary in the Middle (AiTM) Base
CAPEC-112: Brute Force Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-115: Authentication Bypass Base
CAPEC-116: Excavation Base
CAPEC-117: Interception Base
CAPEC-122: Privilege Abuse Base
CAPEC-123: Buffer Manipulation Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-125: Flooding Base
CAPEC-129: Pointer Manipulation Base
CAPEC-130: Excessive Allocation Base
CAPEC-131: Resource Leak Exposure Base
CAPEC-137: Parameter Injection Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-153: Input Data Manipulation Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-165: File Manipulation Base
CAPEC-169: Footprinting Base
CAPEC-173: Action Spoofing Base
CAPEC-175: Code Inclusion Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-184: Software Integrity Attack Base
CAPEC-188: Reverse Engineering Base
CAPEC-212: Functionality Misuse Base
CAPEC-224: Fingerprinting Base
CAPEC-227: Sustained Client Engagement Base
CAPEC-233: Privilege Escalation Base
CAPEC-240: Resource Injection Base
CAPEC-242: Code Injection Base
CAPEC-248: Command Injection Base
CAPEC-272: Protocol Manipulation Base
CAPEC-410: Information Elicitation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-549: Local Execution of Code Base
CAPEC-554: Functionality Bypass Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-586: Object Injection Base
CAPEC-594: Traffic Injection Base
CAPEC-607: Obstruction Base
CAPEC-690: Metadata Spoofing Base
CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.
CAPEC-26: Leveraging Race Conditions Base
CAPEC-74: Manipulating State Base
CAPEC-113: Interface Manipulation Base
CAPEC-114: Authentication Abuse Base
CAPEC-116: Excavation Base
CAPEC-122: Privilege Abuse Base
CAPEC-124: Shared Resource Manipulation Base
CAPEC-148: Content Spoofing Base
CAPEC-151: Identity Spoofing Base
CAPEC-154: Resource Location Spoofing Base
CAPEC-161: Infrastructure Manipulation Base
CAPEC-176: Configuration/Environment Manipulation Base
CAPEC-188: Reverse Engineering Base
CAPEC-192: Protocol Analysis Base
CAPEC-212: Functionality Misuse Base
CAPEC-233: Privilege Escalation Base
CAPEC-438: Modification During Manufacture Base
CAPEC-439: Manipulation During Distribution Base
CAPEC-440: Hardware Integrity Attack Base
CAPEC-441: Malicious Logic Insertion Base
CAPEC-548: Contaminate Resource Base
CAPEC-560: Use of Known Domain Credentials Base
CAPEC-607: Obstruction Base
CAPEC-624: Hardware Fault Injection Base

Informações CAPEC

Notas

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Submissão

Nome Organização Data Data de lançamento
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modificações

Nome Organização Data Comentário
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Other_Notes
As informações apresentadas no CVE Find originam-se de várias fontes de referência cuidadosamente selecionadas. Os dados CVE são fornecidos pela MITRE Corporation e pelo National Vulnerability Database (NVD). O catálogo de Vulnerabilidades Conhecidas Exploradas (KEV) é proveniente da Cybersecurity and Infrastructure Security Agency (CISA), enquanto as pontuações EPSS vêm do FIRST.org. Além disso, os dados sobre fraquezas de software (CWE) e padrões de ataque comuns (CAPEC) são mantidos pela MITRE Corporation, e as informações sobre configurações de hardware e software (CPE) são fornecidas pelo NVD.