COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-216

Communication Channel Manipulation

An adversary manipulates a setting or parameter on communications channel in order to compromise its security. This can result in information exposure, insertion/removal of information from the communications stream, and/or potentially system compromise.

Soyutlama

Meta

Tipik ciddiyet

High

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary manipulates a setting or parameter on communications channel in order to compromise its security. This can result in information exposure, insertion/removal of information from the communications stream, and/or potentially system compromise.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The target application must leverage an open communications channel.
  • The channel on which the target communicates must be vulnerable to interception (e.g., adversary in the middle attack - CAPEC-94 ).

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • A tool that is capable of viewing network traffic and generating custom inputs to be used in the attack.

Etki

Başarılı saldırı neye yol açar?

Read DataModify DataOther

Etkilenen alanlar: Integrity

Read Data

Etkilenen alanlar: Confidentiality

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Encrypt all sensitive communications using properly-configured cryptography.
2
Design the communication system such that it associates proper authentication/authorization with each channel/message.