|
|
|
|
To respond effectively to today’s attacks, the community needs to think outside of the box and have a firm grasp of the attacker’s perspective and the approaches used to exploit software systems. CAPEC™ provides this information to the community to enhance security throughout the software development lifecycle and to support the needs of developers, testers, and educators.
International in scope and free for public use, CAPEC is a publicly available, community-developed list of common attack patterns along with a comprehensive schema and classification taxonomy. Each attack pattern captures knowledge about how specific parts of an attack are designed and executed, providing the attacker’s perspective on the problem and the solution, and gives guidance on ways to mitigate the attack’s effectiveness. Attack patterns help those trying to defend against attacks better understand the specific elements of an attack and how to stop them from succeeding.
|
|
