MITRE ATT&CKsub-technique
T1499.003 Application Exhaustion Flood
- Domain
- enterprise
- Tactics
- Impact
- Platforms
- Windows, IaaS, Linux, macOS
- Version
- 1.3
- Created
- 2020-02-20
Description
Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications. For example, specific features in web applications may be highly resource intensive. Repeated requests to those features may be able to exhaust system resources and deny access to the application or the server itself.
Related
Subtechnique of · MITRE ATT&CK (1)
- T1499 Endpoint Denial of Service technique
Tactic · MITRE ATT&CK (1)
- TA0040 Impact tactic
Referenced by MITRE ATT&CK · mitigates (1)
- M1037 Filter Network Traffic mitigation
Referenced by CAPEC · att&ck technique (1)
- CAPEC-130 Excessive Allocation attack pattern
Referenced by Compliance · mitigates (11)
- CIS-13.10 Perform Application Layer Filtering CIS Safeguard v8.1
- CIS-4.5 Implement and Manage a Firewall on End-User Devices CIS Safeguard v8.1
- NIST-AC-3 Access Enforcement NIST 800-53 control
- NIST-AC-4 Information Flow Enforcement NIST 800-53 control
- NIST-CA-7 Continuous Monitoring NIST 800-53 control
- NIST-CM-6 Configuration Settings NIST 800-53 control
- NIST-CM-7 Least Functionality NIST 800-53 control
- NIST-SC-7 Boundary Protection NIST 800-53 control
- NIST-SI-10 Information Input Validation NIST 800-53 control
- NIST-SI-15 Information Output Filtering NIST 800-53 control
- NIST-SI-4 System Monitoring NIST 800-53 control