CAPEC Definitions
CAPEC Definitions / CAPEC-550
CAPEC-550: Install New Service
When an operating system starts, it also starts programs called services or daemons. Adversaries may install a new service which will be executed at startup (on a Windows system, by modifying the registry). The service name may be disguised by using a name from a related operating system or benign software. Services are usually run with elevated privileges.
Severity:
Possibility:
Extended Description
No Extended Description.
Mitigations
Limit privileges of user accounts so new service creation can only be performed by authorized administrators.
Relationships with other CAPECs
CAPEC-542: Targeted Malware
Prerequisites
No prerequisites found.
Related Weaknesses
CWE-284: Improper Access Control
