COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-678

System Build Data Maliciously Altered

During the system build process, the system is deliberately misconfigured by the alteration of the build data. Access to system configuration data files and build processes is susceptible to deliberate misconfiguration of the system.

Soyutlama

Detailed

Tipik ciddiyet

High

Saldırı ihtimali

Low

Saldırıyı anla

Bu saldırı kalıbı nedir?

During the system build process, the system is deliberately misconfigured by the alteration of the build data. Access to system configuration data files and build processes is susceptible to deliberate misconfiguration of the system.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • An adversary has access to the data files and processes used for executing system configuration and performing the build.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Etki

Başarılı saldırı neye yol açar?

Execute Unauthorized Commands

Etkilenen alanlar: Integrity

Gain Privileges

Etkilenen alanlar: Access Control

Modify DataRead Data

Etkilenen alanlar: Confidentiality

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Implement configuration management security practices that protect the integrity of software and associated data.
2
Monitor and control access to the configuration management system.
3
Harden centralized repositories against attack.
4
Establish acceptance criteria for configuration management check-in to assure integrity.
5
Plan for and audit the security of configuration management administration processes.
6
Maintain configuration control over operational systems.

Gerçek dünya

MITRE örnek olayları

Örnek olay 1Detay
‘Make’ is a program used for building executable programs and libraries from source code by executing commands and following rules in a ‘makefile’. It can create a malicious executable if commands or dependency paths in the makefile are maliciously altered to execute an unwanted command or reference as a dependency maliciously altered code.