CAPEC-3000 - 攻擊模式詳細資料 | CVE Find

廠商與產品

CPE（通用平台枚舉）是一種用於命名硬體、軟體和作業系統的標準化方案。CPE 提供結構化命名方式，可根據廠商、產品名稱、版本、更新、版次和語言等特定屬性，唯一識別和分類資訊技術系統、平台和套件。

名稱: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

CAPEC 成員

CAPEC-513: Software 類別

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

CAPEC-21: Exploitation of Trusted Identifiers 基礎

CAPEC-22: Exploiting Trust in Client 基礎

CAPEC-25: Forced Deadlock 基礎

CAPEC-26: Leveraging Race Conditions 基礎

CAPEC-28: Fuzzing 基礎

CAPEC-74: Manipulating State 基礎

CAPEC-94: Adversary in the Middle (AiTM) 基礎

CAPEC-112: Brute Force 基礎

CAPEC-113: Interface Manipulation 基礎

CAPEC-114: Authentication Abuse 基礎

CAPEC-115: Authentication Bypass 基礎

CAPEC-116: Excavation 基礎

CAPEC-117: Interception 基礎

CAPEC-122: Privilege Abuse 基礎

CAPEC-123: Buffer Manipulation 基礎

CAPEC-124: Shared Resource Manipulation 基礎

CAPEC-125: Flooding 基礎

CAPEC-129: Pointer Manipulation 基礎

CAPEC-130: Excessive Allocation 基礎

CAPEC-131: Resource Leak Exposure 基礎

CAPEC-137: Parameter Injection 基礎

CAPEC-148: Content Spoofing 基礎

CAPEC-151: Identity Spoofing 基礎

CAPEC-153: Input Data Manipulation 基礎

CAPEC-154: Resource Location Spoofing 基礎

CAPEC-161: Infrastructure Manipulation 基礎

CAPEC-165: File Manipulation 基礎

CAPEC-169: Footprinting 基礎

CAPEC-173: Action Spoofing 基礎

CAPEC-175: Code Inclusion 基礎

CAPEC-176: Configuration/Environment Manipulation 基礎

CAPEC-184: Software Integrity Attack 基礎

CAPEC-188: Reverse Engineering 基礎

CAPEC-212: Functionality Misuse 基礎

CAPEC-224: Fingerprinting 基礎

CAPEC-227: Sustained Client Engagement 基礎

CAPEC-233: Privilege Escalation 基礎

CAPEC-240: Resource Injection 基礎

CAPEC-242: Code Injection 基礎

CAPEC-248: Command Injection 基礎

CAPEC-272: Protocol Manipulation 基礎

CAPEC-410: Information Elicitation 基礎

CAPEC-438: Modification During Manufacture 基礎

CAPEC-441: Malicious Logic Insertion 基礎

CAPEC-548: Contaminate Resource 基礎

CAPEC-549: Local Execution of Code 基礎

CAPEC-554: Functionality Bypass 基礎

CAPEC-560: Use of Known Domain Credentials 基礎

CAPEC-586: Object Injection 基礎

CAPEC-594: Traffic Injection 基礎

CAPEC-607: Obstruction 基礎

CAPEC-690: Metadata Spoofing 基礎

CAPEC-515: Hardware 類別

CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.

CAPEC-26: Leveraging Race Conditions 基礎

CAPEC-74: Manipulating State 基礎

CAPEC-113: Interface Manipulation 基礎

CAPEC-114: Authentication Abuse 基礎

CAPEC-116: Excavation 基礎

CAPEC-122: Privilege Abuse 基礎

CAPEC-124: Shared Resource Manipulation 基礎

CAPEC-148: Content Spoofing 基礎

CAPEC-151: Identity Spoofing 基礎

CAPEC-154: Resource Location Spoofing 基礎

CAPEC-161: Infrastructure Manipulation 基礎

CAPEC-176: Configuration/Environment Manipulation 基礎

CAPEC-188: Reverse Engineering 基礎

CAPEC-192: Protocol Analysis 基礎

CAPEC-212: Functionality Misuse 基礎

CAPEC-233: Privilege Escalation 基礎

CAPEC-438: Modification During Manufacture 基礎

CAPEC-439: Manipulation During Distribution 基礎

CAPEC-440: Hardware Integrity Attack 基礎

CAPEC-441: Malicious Logic Insertion 基礎

CAPEC-548: Contaminate Resource 基礎

CAPEC-560: Use of Known Domain Credentials 基礎

CAPEC-607: Obstruction 基礎

CAPEC-624: Hardware Fault Injection 基礎

CAPEC-512: Communications 類別

CAPEC-512: Attack patterns within this category focus on the exploitation of communications and related protocols. The techniques defined by each pattern are used by an adversary to block, manipulate, and steal communications in an attempt to achieve a desired negative technical impact.

CAPEC-22: Exploiting Trust in Client 基礎

CAPEC-94: Adversary in the Middle (AiTM) 基礎

CAPEC-117: Interception 基礎

CAPEC-125: Flooding 基礎

CAPEC-130: Excessive Allocation 基礎

CAPEC-148: Content Spoofing 基礎

CAPEC-151: Identity Spoofing 基礎

CAPEC-154: Resource Location Spoofing 基礎

CAPEC-161: Infrastructure Manipulation 基礎

CAPEC-169: Footprinting 基礎

CAPEC-192: Protocol Analysis 基礎

CAPEC-216: Communication Channel Manipulation 基礎

CAPEC-240: Resource Injection 基礎

CAPEC-272: Protocol Manipulation 基礎

CAPEC-594: Traffic Injection 基礎

CAPEC-607: Obstruction 基礎

CAPEC-624: Hardware Fault Injection 基礎

CAPEC-437: Supply Chain 類別

CAPEC-437: Attack patterns within this category focus on the disruption of the supply chain lifecycle by manipulating computer system hardware, software, or services for the purpose of espionage, theft of critical data or technology, or the disruption of mission-critical operations or infrastructure. Supply chain operations are usually multi-national with parts, components, assembly, and delivery occurring across multiple countries offering an attacker multiple points for disruption.

CAPEC-116: Excavation 基礎

CAPEC-154: Resource Location Spoofing 基礎

CAPEC-176: Configuration/Environment Manipulation 基礎

CAPEC-184: Software Integrity Attack 基礎

CAPEC-438: Modification During Manufacture 基礎

CAPEC-439: Manipulation During Distribution 基礎

CAPEC-440: Hardware Integrity Attack 基礎

CAPEC-690: Metadata Spoofing 基礎

CAPEC-403: Social Engineering 類別

CAPEC-403: Attack patterns within this category focus on the manipulation and exploitation of people. The techniques defined by each pattern are used to convince a target into performing actions or divulging confidential information that benefit the adversary, often resulting in access to computer systems or facilities. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access. In most cases, the adversary never comes face-to-face with the victim.

CAPEC-137: Parameter Injection 基礎

CAPEC-151: Identity Spoofing 基礎

CAPEC-154: Resource Location Spoofing 基礎

CAPEC-173: Action Spoofing 基礎

CAPEC-184: Software Integrity Attack 基礎

CAPEC-410: Information Elicitation 基礎

CAPEC-416: Manipulate Human Behavior 基礎

CAPEC-607: Obstruction 基礎

CAPEC-690: Metadata Spoofing 基礎

CAPEC-514: Physical Security 類別

CAPEC-514: Attack patterns within this category focus on physical security. The techniques defined by each pattern are used to exploit weaknesses in the physical security of a system in an attempt to achieve a desired negative technical impact.

CAPEC-116: Excavation 基礎

CAPEC-117: Interception 基礎

CAPEC-188: Reverse Engineering 基礎

CAPEC-390: Bypassing Physical Security 基礎

CAPEC-440: Hardware Integrity Attack 基礎

CAPEC-507: Physical Theft 基礎

CAPEC-607: Obstruction 基礎

CAPEC 資訊

備注

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

提交

名稱	機構	日期	發布日期
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

修改記錄

名稱	機構	日期	備註
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Other_Notes