Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0837_loss-of-protection
Adversaries may compromise protective system functions designed to prevent the effects of faults and abnormal conditions.
Passed 19 of 24 test cases with the skill, and 12 of 24 without it.
and 6 more in the full report
8 fixed11 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
When mapping software weaknesses for protective system bypass vulnerabilities, which Common Weakness Enumeration ID and title are mapped to T0837?
| Checked | Without skill | With skill |
|---|---|---|
| Maps technique T0837 to CWE-400 Uncontrolled Resource Consumption | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may compromise protective system functions designed to prevent the effects of faults and abnormal conditions. This can result in equipment damage, prolonged process disruptions and hazards to personnel.
Many faults and abnormal conditions in process control happen too quickly for a human operator to react to. Speed is critical in correcting these conditions to limit serious impacts such as Loss of Control and Property Damage.
Adversaries may target and disable protective system functions as a prerequisite to subsequent attack execution or to allow for future faults and abnormal conditions to go unchecked. Detection of a Loss of Protection by operators can result in the shutdown of a process due to strict policies regarding protection systems. This can cause a Loss of Productivity and Revenue and may meet the technical goals of adversaries seeking to cause process disruptions.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Loss of Protection by examining operational technology systems and network architecture.
Review whether mitigations for T0837 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
No specific mitigations documented for this technique.
test cases passed, vs 12 / 24 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.