CAPEC-309: Network Topology Mapping
Standard
Draft
严重程度: Low
CAPEC版本: 3.9
更新日期: 2023-01-24
攻击模式描述
An adversary engages in scanning activities to map network nodes, hosts, devices, and routes. Adversaries usually perform this type of network reconnaissance during the early stages of attack against an external network. Many types of scanning utilities are typically employed, including ICMP tools, network mappers, port scanners, and route testing utilities such as traceroute.
前提条件
- None
所需资源
- Probing requires the ability to interactively send and receive data from a target, whereas passive listening requires a sufficient understanding of the protocol to analyze a preexisting channel of communication.
后果影响
影响范围: Confidentiality
技术影响: Other
分类映射
| 分类名称 | 条目ID | 条目名称 |
|---|---|---|
| ATTACK | 1016 | System Network Configuration Discovery |
| ATTACK | 1049 | System Network Connections Discovery |
| ATTACK | 1590 | Gather Victim Network Information |