简体中文

CAPEC-703 视图详情

CAPEC-703

Industrial Control System (ICS) Patterns
2023-01-24
00h00 +00:00
Draft
Explicit
CAPEC Mitre.org
指定 CAPEC 提醒
随时了解指定 CAPEC 的变更。
管理通知

名称: Industrial Control System (ICS) Patterns

This view contains a listing of CAPECs that apply to industrial control systems (ICS). Some children of these attack patterns might also be applicable.

CAPEC 成员

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs 基础

CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data 基础

CAPEC-65: Sniff Application Code 基础

CAPEC-70: Try Common or Default Usernames and Passwords 基础

CAPEC-94: Adversary in the Middle (AiTM) 基础

CAPEC-98: Phishing 基础

CAPEC-125: Flooding 基础

CAPEC-130: Excessive Allocation 基础

CAPEC-131: Resource Leak Exposure 基础

CAPEC-141: Cache Poisoning 基础

CAPEC-148: Content Spoofing 基础

CAPEC-158: Sniffing Network Traffic 基础

CAPEC-163: Spear Phishing 基础

CAPEC-165: File Manipulation 基础

CAPEC-169: Footprinting 基础

CAPEC-177: Create files with the same name as files protected with a higher classification 基础

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels 基础

CAPEC-184: Software Integrity Attack 基础

CAPEC-191: Read Sensitive Constants Within an Executable 基础

CAPEC-227: Sustained Client Engagement 基础

CAPEC-268: Audit Log Manipulation 基础

CAPEC-292: Host Discovery 基础

CAPEC-309: Network Topology Mapping 基础

CAPEC-312: Active OS Fingerprinting 基础

CAPEC-313: Passive OS Fingerprinting 基础

CAPEC-438: Modification During Manufacture 基础

CAPEC-439: Manipulation During Distribution 基础

CAPEC-441: Malicious Logic Insertion 基础

CAPEC-457: USB Memory Attacks 基础

CAPEC-473: Signature Spoof 基础

CAPEC-504: Task Impersonation 基础

CAPEC-540: Overread Buffers 基础

CAPEC-547: Physical Destruction of Device or Component 基础

CAPEC-552: Install Rootkit 基础

CAPEC-555: Remote Services with Stolen Credentials 基础

CAPEC-560: Use of Known Domain Credentials 基础

CAPEC-573: Process Footprinting 基础

CAPEC-580: System Footprinting 基础

CAPEC-603: Blockage 基础

CAPEC-607: Obstruction 基础

CAPEC-635: Alternative Execution Due to Deceptive Filenames 基础

CAPEC-648: Collect Data from Screen Capture 基础

CAPEC-649: Adding a Space to a File Extension 基础

CAPEC-690: Metadata Spoofing 基础

CAPEC-691: Spoof Open-Source Software Metadata 基础

CAPEC-692: Spoof Version Control System Commit Metadata 基础

CAPEC 信息

备注

This view was created in part by utilizing the ATT&CK ICS Matrix [REF-752].

提交记录

名称 组织 日期 发布日期
CAPEC Content Team The MITRE Corporation 2023-01-24 +00:00

参考资料

REF-752

ATT&CK ICS
https://attack.mitre.org/matrices/ics/
cvefind.com 上展示的信息来源于多个精心选择的权威数据源。CVE 数据由 MITRE Corporation 和 National Vulnerability Database (NVD) 提供。已知被利用漏洞（KEV）目录来源于 Cybersecurity and Infrastructure Security Agency (CISA)，EPSS 评分来自 FIRST.org。此外，软件弱点（CWE）和常见攻击模式（CAPEC）数据由 MITRE Corporation 维护，硬件和软件配置（CPE）信息由 NVD 提供。