CAPEC-3000 Détail

Fabricants et Produits

CPE, qui signifie Common Platform Enumeration, est un système normalisé de dénomination du matériel, des logiciels et des systèmes d'exploitation. CPE fournit un schéma de dénomination structuré pour identifier et classer de manière unique les systèmes informatiques, les plates-formes et les progiciels sur la base de certains attributs tels que le fournisseur, le nom du produit, la version, la mise à jour, l'édition et la langue.

CAPEC-3000

Nom

Domains of Attack

Statut

Draft

Type

Graph

Publié

2014-06-23
00h00 +00:00

Modifié

2018-07-31
00h00 +00:00

Liens officiels

CAPEC Mitre.org

Alerte pour un CAPEC

Restez informé de toutes modifications pour un CAPEC spécifique.

Gestion des notifications

Liste des Notifications

Alerte pour un CAPEC

Restez informé de toutes modifications pour un CAPEC spécifique.

Paramètres

Vous pouvez spécifier un titre qui sera récupéré dans les alertes qui seront envoyées.

Spécifiez le CAPEC ID que vous désirez surveiller.

Planifications

Mois

Prochaine exécution calculée

Jour

Jour de la semaine

Heure

Minute

Date de création

-

Dernière exécution

-

Prochaine exécution

-

Fonctionnalité nécessitant une connexion

Cette fonctionnalité qui vous permet de recevoir des alertes, n'est active que lorsque vous êtes connecté à votre compte.

Nom: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

Membres CAPEC

CAPEC-513: Software Category

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

CAPEC-21: Exploitation of Trusted Identifiers Base

CAPEC-22: Exploiting Trust in Client Base

CAPEC-25: Forced Deadlock Base

CAPEC-26: Leveraging Race Conditions Base

CAPEC-28: Fuzzing Base

CAPEC-74: Manipulating State Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-112: Brute Force Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-115: Authentication Bypass Base

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-122: Privilege Abuse Base

CAPEC-123: Buffer Manipulation Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-125: Flooding Base

CAPEC-129: Pointer Manipulation Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-137: Parameter Injection Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-153: Input Data Manipulation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-173: Action Spoofing Base

CAPEC-175: Code Inclusion Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-188: Reverse Engineering Base

CAPEC-212: Functionality Misuse Base

CAPEC-224: Fingerprinting Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-233: Privilege Escalation Base

CAPEC-240: Resource Injection Base

CAPEC-242: Code Injection Base

CAPEC-248: Command Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-410: Information Elicitation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-549: Local Execution of Code Base

CAPEC-554: Functionality Bypass Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-586: Object Injection Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

CAPEC-515: Hardware Category

CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.

CAPEC-26: Leveraging Race Conditions Base

CAPEC-74: Manipulating State Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-116: Excavation Base

CAPEC-122: Privilege Abuse Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-188: Reverse Engineering Base

CAPEC-192: Protocol Analysis Base

CAPEC-212: Functionality Misuse Base

CAPEC-233: Privilege Escalation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-607: Obstruction Base

CAPEC-624: Hardware Fault Injection Base

CAPEC-512: Communications Category

CAPEC-512: Attack patterns within this category focus on the exploitation of communications and related protocols. The techniques defined by each pattern are used by an adversary to block, manipulate, and steal communications in an attempt to achieve a desired negative technical impact.

CAPEC-22: Exploiting Trust in Client Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-117: Interception Base

CAPEC-125: Flooding Base

CAPEC-130: Excessive Allocation Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-192: Protocol Analysis Base

CAPEC-216: Communication Channel Manipulation Base

CAPEC-240: Resource Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-624: Hardware Fault Injection Base

CAPEC-437: Supply Chain Category

CAPEC-437: Attack patterns within this category focus on the disruption of the supply chain lifecycle by manipulating computer system hardware, software, or services for the purpose of espionage, theft of critical data or technology, or the disruption of mission-critical operations or infrastructure. Supply chain operations are usually multi-national with parts, components, assembly, and delivery occurring across multiple countries offering an attacker multiple points for disruption.

CAPEC-116: Excavation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-690: Metadata Spoofing Base

CAPEC-403: Social Engineering Category

CAPEC-403: Attack patterns within this category focus on the manipulation and exploitation of people. The techniques defined by each pattern are used to convince a target into performing actions or divulging confidential information that benefit the adversary, often resulting in access to computer systems or facilities. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access. In most cases, the adversary never comes face-to-face with the victim.

CAPEC-137: Parameter Injection Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-173: Action Spoofing Base

CAPEC-184: Software Integrity Attack Base

CAPEC-410: Information Elicitation Base

CAPEC-416: Manipulate Human Behavior Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

CAPEC-514: Physical Security Category

CAPEC-514: Attack patterns within this category focus on physical security. The techniques defined by each pattern are used to exploit weaknesses in the physical security of a system in an attempt to achieve a desired negative technical impact.

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-188: Reverse Engineering Base

CAPEC-390: Bypassing Physical Security Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-507: Physical Theft Base

CAPEC-607: Obstruction Base

Informations du CAPEC

Notes

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Soumission

Nom	Organisation	Date	Date de publication
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

Modifications

Nom	Organisation	Date	Commentaire
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Other_Notes