CAPEC-690 詳細資料

CAPEC-690

Metadata Spoofing
2022-09-29
00h00 +00:00
中危
高危
Stable
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
管理通知

CAPEC 資訊

前置條件

Identification of a resource whose metadata is to be spoofed

所需技能

Ability to spoof a variety of metadata to convince victims the source is trusted

緩解措施

Validate metadata of resources such as authors, timestamps, and statistics.
Confirm the pedigree of open source packages and ensure the code being downloaded does not originate from another source.
Even if the metadata is properly checked and a user believes it to be legitimate, there may still be a chance that they've been duped. Therefore, leverage automated testing techniques to determine where malicious areas of the code may exist.

提交

名稱 機構 日期 發布日期
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00