COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-216

Communication Channel Manipulation

An adversary manipulates a setting or parameter on communications channel in order to compromise its security. This can result in information exposure, insertion/removal of information from the communications stream, and/or potentially system compromise.

Abstraction

Meta

Typical severity

High

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An adversary manipulates a setting or parameter on communications channel in order to compromise its security. This can result in information exposure, insertion/removal of information from the communications stream, and/or potentially system compromise.

Requirements

What does the attack require?

Prerequisites

  • The target application must leverage an open communications channel.
  • The channel on which the target communicates must be vulnerable to interception (e.g., adversary in the middle attack - CAPEC-94 ).

Skills required

Not stated in the MITRE record.

Resources required

  • A tool that is capable of viewing network traffic and generating custom inputs to be used in the attack.

Impact

What does a successful attack lead to?

Read DataModify DataOther

Affected scopes: Integrity

Read Data

Affected scopes: Confidentiality

Defence

How is it prevented and mitigated?

1
Encrypt all sensitive communications using properly-configured cryptography.
2
Design the communication system such that it associates proper authentication/authorization with each channel/message.
CAPEC-216: Communication Channel Manipulation — DayBreach Saldırı Sözlüğü · DayBreach