CAPEC attack patterns

MITRE's Common Attack Pattern Enumeration and Classification: the known ways attackers exploit weaknesses, with each pattern's abstraction level, likelihood of attack and typical severity.

Table: demo.security.capec_patterns
Source: MITRE CAPEC
Rows
Updated

Query it in Studio Use the OData API

Preview

The first ten rows

Live from the table, no sign-in needed.

SELECT capec_id, name, abstraction, likelihood_of_attack, typical_severity
  FROM demo.security.capec_patterns
 LIMIT 10

Example questions

Ask it something

Run any of these here, or open it in Studio to change the SQL. Studio is free to start: 100 queries a day.

How severe are attack patterns typically?

SELECT typical_severity, COUNT(*) AS patterns
  FROM demo.security.capec_patterns
 WHERE typical_severity IS NOT NULL
 GROUP BY typical_severity
 ORDER BY patterns DESC

Edit in Studio

Which patterns are both likely and very severe?

SELECT capec_id, name, abstraction
  FROM demo.security.capec_patterns
 WHERE likelihood_of_attack = 'High' AND typical_severity = 'Very High'
 ORDER BY capec_id
 LIMIT 10

Edit in Studio

Schema

Columns

Column	Type
capec_id	VARCHAR
entry_type	VARCHAR
name	VARCHAR
abstraction	VARCHAR
status	VARCHAR
likelihood_of_attack	VARCHAR
typical_severity	VARCHAR
description	VARCHAR