D3FEND 技术详情

D3-CCSA

D3-CCSA

Credential Compromise Scope Analysis

定义

Determining which credentials may have been compromised by analyzing the user logon history of a particular system.

父技术
子技术
关联构件
Credential
Credential

A credential is a physical/tangible object, a piece of knowledge, or a facet of a person's physical being that enables an individual access to a given physical facility or computer-based information system. Typically, credentials can be something a person knows (such as a number or PIN), something they have (such as an access badge), something they are (such as a biometric feature), something they do (measurable behavioral patterns) or some combination of these items. This is known as multi-factor authentication. The typical credential is an access card or key-fob, and newer software can also turn users' smartphones into access devices.

语义关系
出向analyzesCredential
出向kb referenceReference - CAR-2015-07-001: All Logins Since Last Boot - MITRE
出向kb referenceReference - Systems and methods for detecting credential theft - Symantec Corp