Standardlikelihood: Mediumseverity: HighStable

CAPEC-444Development Alteration

Abstraction
Standard
Status
Stable
Likelihood
Medium
Severity
High

Description

An adversary modifies a technology, product, or component during its development to acheive a negative impact once the system is deployed. The goal of the adversary is to modify the system in such a way that the negative impact can be leveraged when the system is later deployed. Development alteration attacks may include attacks that insert malicious logic into the system's software, modify or replace hardware components, and other attacks which negatively impact the system during development. These attacks generally require insider access to modify source code or to tamper with hardware components. The product is then delivered to the user where the negative impact can be leveraged at a later time.

Related attack patterns· 1

CAPEC-438 (ChildOf)

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CAPEC
Design Alteration
CAPEC
Software Development Tools Maliciously Altered
CAPEC
Infiltration of Hardware Development Environment
CAPEC
Manipulation During Distribution
CAPEC
Modification During Manufacture
CAPEC
Malicious Logic Inserted Into Product by Authorized Developer
Sourced from MITRE CAPEC. Curated by Adam Lundqvist, SQUR.