MetaCAPEC-507
CAPEC-507: Physical Theft
Description
An adversary gains physical access to a system or device through theft of the item. Possession of a system or device enables a number of unique attacks to be executed and often provides the adversary with an extended timeframe for which to perform an attack. Most protections put in place to secure sensitive information can be defeated when an adversary has physical access and enough time.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Not rated by MITRE
- Abstraction
- MetaA decidedly abstract characterisation of a methodology or technique.
Mechanism of attack: Subvert Access Control
Prerequisites
- This type of attack requires the existence of a physical target that an adversary believes hosts something of value.
Mitigations
- To mitigate this type of attack, physical security techniques such as locks doors, alarms, and monitoring of targets should be implemented.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.