| 名称 |
Local Execution of Code |
|
|
| 摘要 |
An adversary installs and executes malicious code on the target system in an effort to achieve a negative technical impact. Examples include rootkits, ransomware, spyware, adware, and others. |
| 前置条件 |
Knowledge of the target system's vulnerabilities that can be capitalized on with malicious code.The adversary must be able to place the malicious code on the target system. |
| 解决方案 | Employ robust cybersecurity training for all employees. Implement system antivirus software that scans all attachments before opening them. Regularly patch all software. Execute all suspicious files in a sandbox environment. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-829 |
Inclusion of Functionality from Untrusted Control Sphere |
|