ByteOS Network

CAPEC-655:Avoid Security Tool Identification by Adding Data

Attack Pattern ID:655

Version:v3.9

Attack Pattern Name:Avoid Security Tool Identification by Adding Data

Abstraction:Detailed

Status:Draft

Likelihood of Attack:High

Typical Severity:High

▼Description

An adversary adds data to a file to increase the file size beyond what security tools are capable of handling in an attempt to mask their actions.

In addition to this, adding data to a file also changes the file's hash, frustrating security tools that look for known bad files by their hash.

▼Relationships

Nature	Type	ID	Name
ChildOf	S	572	Artificially Inflate File Sizes

Nature: ChildOf

Type: Standard

ID: 572

Name: Artificially Inflate File Sizes

▼Consequences

Scope	Likelihood	Impact	Note
Accountability	N/A	Hide ActivitiesBypass Protection Mechanism	N/A
Integrity	N/A	Modify Data	N/A

Scope: Accountability

Likelihood: N/A

Impact: Hide Activities, Bypass Protection Mechanism

Note: N/A

Scope: Integrity

Likelihood: N/A

Impact: Modify Data

Note: N/A

▼Example Instances

▼Taxonomy Mappings

Taxonomy Name	Entry ID	Entry Name
ATTACK	1027.001	Obfuscated Files or Information:Binary padding

Taxonomy Name: ATTACK

Entry ID: 1027.001

Entry Name: Obfuscated Files or Information:Binary padding