| 名称 |
Signature Spoofing by Key Theft |
|
|
| 摘要 |
An attacker obtains an authoritative or reputable signer's private signature key by theft and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker. |
| 前置条件 |
An authoritative or reputable signer is storing their private signature key with insufficient protection. |
| 解决方案 | Restrict access to private keys from non-supervisory accounts Restrict access to administrative personnel and processes only Ensure all remote methods are secured Ensure all services are patched and up to date |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-522 |
Insufficiently Protected Credentials |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-473 |
An attacker generates a message or datablock that causes the recipient to believe that the message or datablock was generated and cryptographically signed by an authoritative or reputable source, misleading a victim or victim operating system into performing malicious actions. |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1552.004 |
Unsecured Credentials: Private Keys |
|