CAPEC CATEGORY: Collect and Analyze Information |
Summary Attack patterns within this category focus on the gathering, collection, and theft of information by an adversary. The adversary may collect this information through a variety of methods including active querying as well as passive observation. By exploiting weaknesses in the design or configuration of the target and its communications, an adversary is able to get the target to reveal more information than intended. Information retrieved may aid the adversary in making inferences about potential weaknesses, vulnerabilities, or techniques that assist the adversary's objectives. This information may include details regarding the configuration or capabilities of the target, clues as to the timing or nature of activities, or otherwise sensitive information. Often this sort of attack is undertaken in preparation for some other type of attack, although the collection of information by itself may in some cases be the end goal of the adversary. Content History Submissions |
---|
Submission Date | Submitter | Organization |
---|
2014-06-23 (Version 2.6) | CAPEC Content Team | The MITRE Corporation | | Modifications |
---|
Modification Date | Modifier | Organization |
---|
2017-01-09 (Version 2.9) | CAPEC Content Team | The MITRE Corporation | Updated Relationships | 2017-08-04 (Version 2.11) | CAPEC Content Team | The MITRE Corporation | Updated Relationships | Previous Entry Names |
---|
Change Date | Previous Entry Name |
---|
2017-01-09 (Version 2.9) | Gather Information | |
More information is available — Please select a different filter.
|