CAPEC-417: Influence Perception
Description
The adversary uses social engineering to exploit the target's perception of the relationship between the adversary and themselves. This goal is to persuade the target to unknowingly perform an action or divulge information that is advantageous to the adversary.
- Likelihood of attack
- High
- Typical severity
- Low
- Abstraction
- StandardA specific methodology or technique used in an attack.
Mechanism of attack: Engage in Deceptive Interactions
Prerequisites
- The adversary must have the means and knowledge of how to communicate with the target in some manner.
Skills required
- LowThe adversary requires strong inter-personal and communication skills.
Consequences
- ConfidentialityIntegrityAvailability
Other
Attacks that influence the perception of the target can result in a wide variety of consequences and negatively affect potentially the confidentiality, availability, and/or integrity of an application or system.
Mitigations
- An organization should provide regular, robust cybersecurity training to its employees to prevent social engineering attacks.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.
Related attack patterns
Parent
More specific patterns
- CAPEC-418Influence Perception of ReciprocationDetailed
- CAPEC-420Influence Perception of ScarcityDetailed
- CAPEC-421Influence Perception of AuthorityDetailed
- CAPEC-422Influence Perception of Commitment and ConsistencyDetailed
- CAPEC-423Influence Perception of LikingDetailed
- CAPEC-424Influence Perception of Consensus or Social ProofDetailed