1. Home
  2. ATT&CK Techniques
  3. T1195.003 Compromise Hardware Supply Chain

T1195.003 Compromise Hardware Supply Chain

Adversaries may manipulate hardware components in products prior to receipt by a final consumer for the purpose of data or system compromise. By modifying hardware or firmware in the supply chain, adversaries can insert a backdoor into consumer networks that may be difficult to detect and give the adversary a high degree of control over the system. Hardware backdoors may be inserted into various devices, such as servers, workstations, network infrastructure, or peripherals.

View in MITRE ATT&CK®

CRI Profile Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
DE.CM-09.02 Hardware integrity checking Mitigates T1195.003 Compromise Hardware Supply Chain
Comments
This diagnostic statement provides protection from Compromise Hardware Supply Chain through the implementation of integrity checking mechanisms. For example, integrity checking mechanisms to verify the operating system, software, firmware, and information integrity before loading it prevents abuse by a threat actor.
References
    EX.MM-01.01 Third-party monitoring and management resources Mitigates T1195.003 Compromise Hardware Supply Chain
    Comments
    This diagnostic statement protects against Supply Chain Compromise through the implementation of procedures for management of third party products.
    References

      NIST 800-53 Mappings

      Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
      SR-11 Component Authenticity mitigates T1195.003 Compromise Hardware Supply Chain
      SR-04 Provenance mitigates T1195.003 Compromise Hardware Supply Chain
      SR-05 Acquisition Strategies, Tools, and Methods mitigates T1195.003 Compromise Hardware Supply Chain
      CM-05 Access Restrictions for Change mitigates T1195.003 Compromise Hardware Supply Chain
      SA-10 Developer Configuration Management mitigates T1195.003 Compromise Hardware Supply Chain
      IA-07 Cryptographic Module Authentication mitigates T1195.003 Compromise Hardware Supply Chain
      RA-09 Criticality Analysis mitigates T1195.003 Compromise Hardware Supply Chain
      SC-34 Non-modifiable Executable Programs mitigates T1195.003 Compromise Hardware Supply Chain
      SI-02 Flaw Remediation mitigates T1195.003 Compromise Hardware Supply Chain
      CM-08 System Component Inventory mitigates T1195.003 Compromise Hardware Supply Chain
      SI-07 Software, Firmware, and Information Integrity mitigates T1195.003 Compromise Hardware Supply Chain
      CM-02 Baseline Configuration mitigates T1195.003 Compromise Hardware Supply Chain
      SA-11 Developer Testing and Evaluation mitigates T1195.003 Compromise Hardware Supply Chain
      CM-03 Configuration Change Control mitigates T1195.003 Compromise Hardware Supply Chain