Common Attack Pattern Enumeration and Classification explained

The Common Attack Pattern Enumeration and Classification (CAPEC) is a catalog of known cyber security attack patterns^[1] to be used by cyber security professionals to prevent attacks.^[2]

Originally released in 2007 by the United States Department of Homeland Security, the project began as an initiative of the Office of Cybersecurity and Communication, and it is now supported by Mitre Corporation and governed under a board of corporate representatives.^[3]

See also

• ATT&CK - another Mitre framework

External links

• MITRE CAPEC

Notes and References

1. Kanakogi . Kenta . Washizaki . Hironori . Fukazawa . Yoshiaki . Ogata . Shinpei . Okubo . Takao . Kato . Takehisa . Kanuka . Hideyuki . Hazeyama . Atsuo . Yoshioka . Nobukazu . 2022-03-27 . Comparative Evaluation of NLP-Based Approaches for Linking CAPEC Attack Patterns from CVE Vulnerability Information . Applied Sciences . en . 12 . 7 . 3400 . 10.3390/app12073400 . 2076-3417. free .
2. Web site: fnCyber™ Go Cyber Resilient Enterprise Cyber Security Consulting & Solutions . 2022-04-27 . www.fncyber.com . en.
3. Web site: CAPEC - About CAPEC .