| 名称 |
IP Address Blocking |
|
|
| 摘要 |
An adversary performing this type of attack drops packets destined for a target IP address. The aim is to prevent access to the service hosted at the target IP address. |
| 前置条件 |
This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection. |
| 解决方案 | Have a large pool of backup IPs built into the application and support proxy capability in the application. |
| 关联弱点 |
|
CWE 编号
|
描述
|
| CWE-300 |
Channel Accessible by Non-Endpoint |
|
| 关联 CAPEC |
|
CAPEC 编号
|
描述
|
| CAPEC-603 |
An adversary blocks the delivery of an important system resource causing the system to fail or stop working. |
|