CAPECattack pattern
CAPEC-427 Influence via Psychological Principles
Low
Official page ↗
- Abstraction
- Standard
- Status
- Draft
- Likelihood of attack
- Low
- Typical severity
- Low
- CAPEC version
- 3.9
Description
The adversary shapes the target's actions or behavior by focusing on the ways human interact and learn, leveraging such elements as cognitive and social psychology. In a variety of ways, a target can be influenced to behave or perform an action through capitalizing on what scholarship and research has learned about how and why humans react to specific scenarios and cues.
Prerequisites
• The adversary must have the means and knowledge of how to communicate with the target in some manner.
Skills required
• [Low] The adversary requires strong inter-personal and communication skills.
Consequences
• Confidentiality, Integrity, Availability: Other
Mitigations
• An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
Related
Child of · CAPEC (1)
- CAPEC-416 Manipulate Human Behavior attack pattern
Referenced by CAPEC · child of (5)
- CAPEC-428 Influence via Modes of Thinking attack pattern
- CAPEC-429 Target Influence via Eye Cues attack pattern
- CAPEC-433 Target Influence via The Human Buffer Overflow attack pattern
- CAPEC-434 Target Influence via Interview and Interrogation attack pattern
- CAPEC-435 Target Influence via Instant Rapport attack pattern