| 名称 |
System Footprinting |
|
|
| 摘要 |
An adversary engages in active probing and exploration activities to determine security information about a remote target system. Often times adversaries will rely on remote applications that can be probed for system configurations. |
| 前置条件 |
The adversary must have logical access to the target network and system. |
| 解决方案 | Keep patches up to date by installing weekly or daily if possible. Identify programs that may be used to acquire peripheral information and block them by using a software restriction policy or tools that restrict program execution by using a process allowlist. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-204 |
Observable Response Discrepancy |
| CWE-205 |
Observable Behavioral Discrepancy |
| CWE-208 |
Observable Timing Discrepancy |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-169 |
An adversary engages in probing and exploration activities to identify constituents and properties of the target. |
|
| 分类体系：ATTACK |
|
条目编号
|
条目名称
|
| 1082 |
System Information Discovery |
|