03.13.12E Denial-of-Service Protection

Statement

• {{ insert: param, A.03.13.12E.ODP.01 }} the effects of the following types of denial-of-service events: {{ insert: param, A.03.13.12E.ODP.02 }}.

• Employ the following safeguards to prevent the denial-of-service events {{ insert: param, A.03.13.12E.ODP.03 }}.

Guidance

Denial-of-service events may occur due to a variety of internal and external causes, such as an attack by an adversary or a lack of planning to support organizational needs with respect to capacity and bandwidth. Such attacks can occur across a wide range of network protocols (e.g., IPv4, IPv6). A variety of technologies are available to limit or eliminate the origination and effects of denial-of-service events. For example, boundary protection devices can filter certain types of packets to protect system components on internal networks from being directly affected by or the source of denial-of-service attacks. Employing increased network capacity and bandwidth combined with service redundancy also reduces the susceptibility to denial-of-service events. This requirement is sourced to a control tailored out of the SP 800-53B .13 moderate baseline in SP 800-171.

Statement

• (includes preempt and negate) Ensure that the threat event does not have an impact.

  • Reduce likelihood of occurrence and/or reduce likelihood of impact.

  • The adversary’s efforts or resources cannot be applied or are wasted.

• (includes exert) Make it more difficult for threat events to cause adverse impacts or consequences.

  • Reduce likelihood of impact and reduce level of impact.

  • Adversary activities are restricted in scope, fail to achieve full effect, do not take place in accordance with adversary timeline, or require greater resources than adversary had planned.

• (includes reduce) Restrict the consequences of realized threat events by limiting the damage or effects they cause in terms of time, system resources, and/or mission or business impacts.

  • Reduce level of impact and reduce likelihood of impact of subsequent events in the same threat scenario.

  • The adversary’s effectiveness is restricted.

Assessment objective

the effects of {{ insert: param, A.03.13.12E.ODP.01 }} are {{ insert: param, A.03.13.12E.ODP.02 }}.

Assessment objective

{{ insert: param, A.03.13.12E.ODP.03 }} are employed to protect against or limit the effects of denial-of-service events.

Assessment method

• System and communications protection policy procedures addressing denial-of-service protection list of denial-of-service attacks requiring employment of security safeguards to protect against or limit effects of such attacks system design documentation list of security safeguards protecting against or limiting the effects of denial-of-service attacks system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Assessment method

• System/network administrators personnel with information security responsibilities personnel with incident response responsibilities system developers

Assessment method

• Mechanisms protecting against or limiting the effects of denial-of-service attacks

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final