CAPEC-116

Meta Abstraction Level
Meta — Very abstract, high-level category
Standard — Specific enough to understand
Detailed — Tied to specific technique Stable MITRE CAPEC Status
Stable — Fully reviewed and complete
Draft — Under development
Incomplete — Partially defined
Deprecated — No longer recommended
Obsolete — Replaced by another CAPEC Likelihood: High Severity: Medium
Excavation

Description

An adversary actively probes the target in a manner that is designed to solicit information that could be leveraged for malicious purposes.

Prerequisites

An adversary requires some way of interacting with the system.

Mitigations

Minimize error/response output to only what is necessary for functional use or corrective language.

Remove potentially sensitive information that is not necessary for the application's functionality.