Install any skill in seconds. Free to start, no credit card required.
Get Started Free →cyberstrikeus/T0880_loss-of-safety
Adversaries may compromise safety system functions designed to maintain safe operation of a process when unacceptable or dangerous conditions occur.
Passed 21 of 26 test cases with the skill, and 13 of 26 without it.
and 10 more in the full report
9 fixed12 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 9 test cases the skill fixed. Same model, same prompt, with and without the skill.
What is the MITRE ATT&CK tactic ID associated with the Impact tactic for Loss of Safety T0880?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies TA0105 as the tactic ID. | Missed | Passed |
The instructions your model reads when the skill loads.
Adversaries may compromise safety system functions designed to maintain safe operation of a process when unacceptable or dangerous conditions occur. Safety systems are often composed of the same elements as control systems but have the sole purpose of ensuring the process fails in a predetermined safe manner.
Many unsafe conditions in process control happen too quickly for a human operator to react to. Speed is critical in correcting these conditions to limit serious impacts such as Loss of Control and Property Damage.
Adversaries may target and disable safety system functions as a prerequisite to subsequent attack execution or to allow for future unsafe conditionals to go unchecked. Detection of a Loss of Safety by operators can result in the shutdown of a process due to strict policies regarding safety systems. This can cause a Loss of Productivity and Revenue and may meet the technical goals of adversaries seeking to cause process disruptions.
Platforms: ICS
Determine if the target ICS/SCADA environment is susceptible to Loss of Safety by examining operational technology systems and network architecture.
Review whether mitigations for T0880 are in place. If defenses are absent or misconfigured, this technique may be exploitable in the ICS environment.
Ensure that all SIS are segmented from operational networks to prevent them from being targeted by additional adversarial behavior.
test cases passed, vs 13 / 26 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.