Threat intelligence / Technique

Black Box Reverse Engineering

An adversary discovers the structure, function, and composition of a type of computer software through black box analysis techniques. 'Black Box' methods involve interacting with the software indirectly, in the absence of direct access to the executable object. Such analysis typically involves interacting with the software at the boundaries of where the software interfaces with a larger execution environment, such as input-output vectors, libraries, or APIs. Black Box Reverse Engineering also refers to gathering physical side effects of a hardware device, such as electromagnetic radiation or sounds.

Technique

TypeTechnique

External ID—

First seen2026-10-17

Last seen2026-10-17

Confidence

—

An adversary discovers the structure, function, and composition of a type of computer software through black box analysis techniques. 'Black Box' methods involve interacting with the software indirectly, in the absence of direct access to the executable object. Such analysis typically involves interacting with the software at the boundaries of where the software interfaces with a larger execution environment, such as input-output vectors, libraries, or APIs. Black Box Reverse Engineering also refers to gathering physical side effects of a hardware device, such as electromagnetic radiation or sounds.

Labels

attack-patterncapec

5 recorded

Relationships

child-of

from Analysis of Packet Timing and Sizes

Technique

child-of

to Reverse Engineering

Technique

child-of

from Compromising Emanations Attack

Technique

child-of

from Electromagnetic Side-Channel Attack

Technique

related-to

from CVE-2024-39891

Vulnerability

1 external

References

capec

CAPEC-189