CAPEC-534
Malicious Hardware Update
2014-06-23
00h00 +00:00
00h00 +00:00
Cảnh báo cho một CAPEC
Luôn được thông báo về mọi thay đổi đối với một CAPEC cụ thể.
Mô tả CAPEC
An adversary introduces malicious hardware during an update or replacement procedure, allowing for additional compromise or site disruption at the victim location. After deployment, it is not uncommon for upgrades and replacements to occur involving hardware and various replaceable parts. These upgrades and replacements are intended to correct defects, provide additional features, and to replace broken or worn-out parts. However, by forcing or tricking the replacement of a good component with a defective or corrupted component, an adversary can leverage known defects to obtain a desired malicious impact.
Thông tin CAPEC
Kỹ năng cần thiết
Able to develop and manufacture malicious hardware components that perform the same functions and processes as their non-malicious counterparts.Tài liệu tham khảo
REF-439
Supply Chain Attack Framework and Attack PatternsJohn F. Miller.
http://www.mitre.org/sites/default/files/publications/supply-chain-attack-framework-14-0228.pdf
REF-711
Shattered Trust: When Replacement Smartphone Components AttackOmer Shwartz, Amir Cohen, Asaf Shabtai, Yossi Oren.
https://www.usenix.org/system/files/conference/woot17/woot17-paper-shwartz.pdf
Gửi
| Tên | Tổ chức | Ngày | Ngày phát hành |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Sửa đổi
| Tên | Tổ chức | Ngày | Bình luận |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Prerequisites, Description Summary, Typical_Likelihood_of_Exploit | |
| CAPEC Content Team | The MITRE Corporation | Updated Description Summary, Examples-Instances | |
| CAPEC Content Team | The MITRE Corporation | Updated References |
