CAPECattack pattern
CAPEC-590 IP Address Blocking
High
Official page ↗
- Abstraction
- Detailed
- Status
- Draft
- Likelihood of attack
- Low
- Typical severity
- High
- CAPEC version
- 3.9
Description
An adversary performing this type of attack drops packets destined for a target IP address. The aim is to prevent access to the service hosted at the target IP address.
Prerequisites
• This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.
Consequences
• Availability: Other
Mitigations
• Have a large pool of backup IPs built into the application and support proxy capability in the application.
Related
Child of · CAPEC (1)
- CAPEC-603 Blockage attack pattern
Weakness · CWE (1)
- CWE-300 Channel Accessible by Non-Endpoint weakness
Referenced by CWE · attack pattern (1)
- CWE-300 Channel Accessible by Non-Endpoint weakness