CAPECattack pattern
CAPEC-626 Smudge Attack
- Abstraction
- Detailed
- Status
- Draft
- CAPEC version
- 3.9
Description
Attacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers.
Prerequisites
• The attacker must have physical access to the device.
Skills required
• [Medium] The attacker must know how to make use of these smudges.
Consequences
• Access Control: Bypass Protection Mechanism
Mitigations
• Strong physical security of the device.
Related
Child of · CAPEC (1)
- CAPEC-395 Bypassing Electronic Locks and Access Controls attack pattern