CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-51 | Poison Web Service Registry | Detailed | Draft | 0 | |
| CAPEC-510 | SaaS User Request Forgery | Standard | Draft | 0 | |
| CAPEC-511 | Infiltration of Software Development Environment | Detailed | Draft | 1 | |
| CAPEC-516 | Hardware Component Substitution During Baselining | Detailed | Draft | 1 | |
| CAPEC-517 | Documentation Alteration to Circumvent Dial-down | Detailed | Draft | 0 | |
| CAPEC-518 | Documentation Alteration to Produce Under-performing Systems | Detailed | Draft | 0 | |
| CAPEC-519 | Documentation Alteration to Cause Errors in System Design | Detailed | Draft | 0 | |
| CAPEC-52 | Embedding NULL Bytes | Detailed | Draft | 0 | |
| CAPEC-520 | Counterfeit Hardware Component Inserted During Product Assembly | Detailed | Draft | 1 | |
| CAPEC-521 | Hardware Design Specifications Are Altered | Detailed | Draft | 0 | |
| CAPEC-522 | Malicious Hardware Component Replacement | Standard | Draft | 1 | |
| CAPEC-523 | Malicious Software Implanted | Standard | Draft | 1 | |
| CAPEC-524 | Rogue Integration Procedures | Standard | Draft | 0 | |
| CAPEC-528 | XML Flood | Standard | Draft | 2 | |
| CAPEC-529 | Malware-Directed Internal Reconnaissance | Standard | Stable | 0 | |
| CAPEC-53 | Postfix, Null Terminate, and Backslash | Detailed | Draft | 0 | |
| CAPEC-530 | Provide Counterfeit Component | Detailed | Draft | 0 | |
| CAPEC-531 | Hardware Component Substitution | Detailed | Draft | 1 | |
| CAPEC-532 | Altered Installed BIOS | Detailed | Stable | 2 | |
| CAPEC-533 | Malicious Manual Software Update | Detailed | Draft | 0 |