CAPECattack pattern

CAPEC-189 Black Box Reverse Engineering

Low Official page ↗
Abstraction
Standard
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

An adversary discovers the structure, function, and composition of a type of computer software through black box analysis techniques. 'Black Box' methods involve interacting with the software indirectly, in the absence of direct access to the executable object. Such analysis typically involves interacting with the software at the boundaries of where the software interfaces with a larger execution environment, such as input-output vectors, libraries, or APIs. Black Box Reverse Engineering also refers to gathering physical side effects of a hardware device, such as electromagnetic radiation or sounds.

Related

Child of · CAPEC (1)

  • CAPEC-188 Reverse Engineering attack pattern

Weakness · CWE (3)

  • CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks weakness
  • CWE-1300 Improper Protection of Physical Side Channels weakness
  • CWE-203 Observable Discrepancy weakness

Referenced by CAPEC · child of (3)

  • CAPEC-621 Analysis of Packet Timing and Sizes attack pattern
  • CAPEC-622 Electromagnetic Side-Channel Attack attack pattern
  • CAPEC-623 Compromising Emanations Attack attack pattern

Referenced by CWE · attack pattern (3)

  • CWE-1255 Comparison Logic is Vulnerable to Power Side-Channel Attacks weakness
  • CWE-1300 Improper Protection of Physical Side Channels weakness
  • CWE-203 Observable Discrepancy weakness