+SC-05 [L] Denial-of-service Protection
|
SC-05 [L] Denial-of-service Protection
Control
- [Selection: protect against; limit] the effects of the following types of denial-of-service events: [Assignement: types of denial-of-service events] ; and
- Employ the following controls to achieve the denial-of-service objective: [Assignement: controls by type of denial-of-service event].
Discussion
Denial-of-service events may occur due to a variety of internal and external causes, such as an attack by an adversary or a lack of planning to support organizational needs with respect to capacity and bandwidth. Such attacks can occur across a wide range of network protocols (e.g., IPv4, IPv6). A variety of technologies are available to limit or eliminate the origination and effects of denial-of-service events. For example, boundary protection devices can filter certain types of packets to protect system components on internal networks from being directly affected by or the source of denial-of-service attacks. Employing increased network capacity and bandwidth combined with service redundancy also reduces the susceptibility to denial-of-service events.
Assessment Objective
- the effects of [Assignement: types of denial-of-service events] are [Selection: protect against; limit];
- [Assignement: controls by type of denial-of-service event] are employed to achieve the denial-of-service protection objective.
Assessment Method
Examine
System and communications protection policy
procedures addressing denial-of-service protection
system design documentation
list of denial-of-service attacks requiring employment of security safeguards to protect against or limit effects of such attacks
list of security safeguards protecting against or limiting the effects of denial-of-service attacks
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
organizational personnel with incident response responsibilities
system developer
1. Forbhreathnú
1.1 Tagairtí
1.2 Ceanglais aitheanta
1.3 Rialacháin ghaolmhara
2. Ceanglais aitheanta
Ceanglais
| Foinse |
Ceanglas |
3. Rialacháin ghaolmhara
Rialacháin
| Foinse |
Rialáil |
Saincheisteanna nasctha
|