繁體中文

CAPEC-703 檢視詳細資料

CAPEC-703

Industrial Control System (ICS) Patterns
2023-01-24
00h00 +00:00
Draft
Explicit
CAPEC Mitre.org
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
管理通知

名稱: Industrial Control System (ICS) Patterns

This view contains a listing of CAPECs that apply to industrial control systems (ICS). Some children of these attack patterns might also be applicable.

CAPEC 成員

CAPEC-1: Accessing Functionality Not Properly Constrained by ACLs 基礎

CAPEC-57: Utilizing REST's Trust in the System Resource to Obtain Sensitive Data 基礎

CAPEC-65: Sniff Application Code 基礎

CAPEC-70: Try Common or Default Usernames and Passwords 基礎

CAPEC-94: Adversary in the Middle (AiTM) 基礎

CAPEC-98: Phishing 基礎

CAPEC-125: Flooding 基礎

CAPEC-130: Excessive Allocation 基礎

CAPEC-131: Resource Leak Exposure 基礎

CAPEC-141: Cache Poisoning 基礎

CAPEC-148: Content Spoofing 基礎

CAPEC-158: Sniffing Network Traffic 基礎

CAPEC-163: Spear Phishing 基礎

CAPEC-165: File Manipulation 基礎

CAPEC-169: Footprinting 基礎

CAPEC-177: Create files with the same name as files protected with a higher classification 基礎

CAPEC-180: Exploiting Incorrectly Configured Access Control Security Levels 基礎

CAPEC-184: Software Integrity Attack 基礎

CAPEC-191: Read Sensitive Constants Within an Executable 基礎

CAPEC-227: Sustained Client Engagement 基礎

CAPEC-268: Audit Log Manipulation 基礎

CAPEC-292: Host Discovery 基礎

CAPEC-309: Network Topology Mapping 基礎

CAPEC-312: Active OS Fingerprinting 基礎

CAPEC-313: Passive OS Fingerprinting 基礎

CAPEC-438: Modification During Manufacture 基礎

CAPEC-439: Manipulation During Distribution 基礎

CAPEC-441: Malicious Logic Insertion 基礎

CAPEC-457: USB Memory Attacks 基礎

CAPEC-473: Signature Spoof 基礎

CAPEC-504: Task Impersonation 基礎

CAPEC-540: Overread Buffers 基礎

CAPEC-547: Physical Destruction of Device or Component 基礎

CAPEC-552: Install Rootkit 基礎

CAPEC-555: Remote Services with Stolen Credentials 基礎

CAPEC-560: Use of Known Domain Credentials 基礎

CAPEC-573: Process Footprinting 基礎

CAPEC-580: System Footprinting 基礎

CAPEC-603: Blockage 基礎

CAPEC-607: Obstruction 基礎

CAPEC-635: Alternative Execution Due to Deceptive Filenames 基礎

CAPEC-648: Collect Data from Screen Capture 基礎

CAPEC-649: Adding a Space to a File Extension 基礎

CAPEC-690: Metadata Spoofing 基礎

CAPEC-691: Spoof Open-Source Software Metadata 基礎

CAPEC-692: Spoof Version Control System Commit Metadata 基礎

CAPEC 資訊

備注

This view was created in part by utilizing the ATT&CK ICS Matrix [REF-752].

提交

名稱 機構 日期 發布日期
CAPEC Content Team The MITRE Corporation 2023-01-24 +00:00

參考資料

REF-752

ATT&CK ICS
https://attack.mitre.org/matrices/ics/
cvefind.com 上呈現的資訊來自多個精心挑選的參考來源。CVE 資料由 MITRE Corporation 和 國家漏洞資料庫（NVD）提供。已知被利用漏洞（KEV）目錄來自 網路安全暨基礎設施安全局（CISA），而 EPSS 評分來自 FIRST.org。此外，軟體弱點（CWE）和常見攻擊模式（CAPEC）的資料由 MITRE Corporation 維護，硬軟體配置（CPE）資訊由 NVD 提供。