CAPECattack pattern
CAPEC-539 ASIC With Malicious Functionality
High
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Likelihood of attack
- Low
- Typical severity
- High
- CAPEC version
- 3.9
Description
An attacker with access to the development environment process of an application-specific integrated circuit (ASIC) for a victim system being developed or maintained after initial deployment can insert malicious functionality into the system for the purpose of disruption or further compromise.
Prerequisites
• The attacker must have working knowledge of some if not all of the components involved in the target system as well as the infrastructure and development environment of the manufacturer.
• Advanced knowledge about the ASIC installed within the target system.
Skills required
• [High] Able to develop and manufacture malicious subroutines for an ASIC environment without degradation of existing functions and processes.
Related
Att&ck technique · MITRE ATT&CK (1)
- T1195.003 Compromise Hardware Supply Chain sub-technique
Child of · CAPEC (1)
- CAPEC-444 Development Alteration attack pattern