CAPEC™ 548: Contaminate Resource
Description
An adversary contaminates organizational information systems (including devices and networks) by causing them to handle information of a classification/sensitivity for which they have not been authorized. When this happens, the contaminated information system, device, or network must be brought offline to investigate and mitigate the data spill, which denies availability of the system until the investigation is complete.
Source: CAPEC™ 548
Related ASVS Requirements
ASVS (5.0): 10.7.1, 10.7.2, 10.7.3, 11.1.1, 11.1.2, 11.1.3, 11.1.4, 13.1.4, 13.3.1, 13.3.2, 13.3.3, 14.2.4, 14.2.5, 14.2.6, 14.2.7, 14.2.8, 5.1.1, 6.3.3, 6.4.6, 6.7.1
