COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-309

Network Topology Mapping

An adversary engages in scanning activities to map network nodes, hosts, devices, and routes. Adversaries usually perform this type of network reconnaissance during the early stages of attack against an external network. Many types of scanning utilities are typically employed, including ICMP tools, network mappers, port scanners, and route testing utilities such as traceroute.

Abstraction

Standard

Typical severity

Low

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An adversary engages in scanning activities to map network nodes, hosts, devices, and routes. Adversaries usually perform this type of network reconnaissance during the early stages of attack against an external network. Many types of scanning utilities are typically employed, including ICMP tools, network mappers, port scanners, and route testing utilities such as traceroute.

Requirements

What does the attack require?

Prerequisites

  • None

Skills required

Not stated in the MITRE record.

Resources required

  • Probing requires the ability to interactively send and receive data from a target, whereas passive listening requires a sufficient understanding of the protocol to analyze a preexisting channel of communication.

Impact

What does a successful attack lead to?

Other

Affected scopes: Confidentiality

CAPEC-309: Network Topology Mapping — DayBreach Saldırı Sözlüğü · DayBreach