CAPEC-623

Compromising Emanations Attack
2015-11-09
00h00 +00:00
低危
Draft
2018-07-31
00h00 +00:00
指定 CAPEC 提醒
随时了解指定 CAPEC 的变更。
管理通知

CAPEC 描述

Compromising Emanations (CE) are defined as unintentional signals which an attacker may intercept and analyze to disclose the information processed by the targeted equipment. Commercial mobile devices and retransmission devices have displays, buttons, microchips, and radios that emit mechanical emissions in the form of sound or vibrations. Capturing these emissions can help an adversary understand what the device is doing.

CAPEC 信息

前提条件

Proximal access to the device.

所需技能

Sophisticated attack.

缓解措施

None are known.

相关弱点

CWE-ID 弱点名称

CWE-201

Insertion of Sensitive Information Into Sent Data
The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

提交记录

名称 组织 日期 发布日期
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00

修改记录

名称 组织 日期 备注
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Attack_Motivation-Consequences