CAPEC-626

Detailed Abstraction Level
Meta — Very abstract, high-level category
Standard — Specific enough to understand
Detailed — Tied to specific technique
Draft MITRE CAPEC Status
Stable — Fully reviewed and complete
Draft — Under development
Incomplete — Partially defined
Deprecated — No longer recommended
Obsolete — Replaced by another CAPEC
Smudge Attack

Description

Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.

Prerequisites

The attacker must have physical access to the device.

Mitigations

Strong physical security of the device.

Skills Required

[Medium] The attacker must know how to make use of these smudges.