There are a large number of different forms of attacks which aim to prevent certain services, functions or devices from being used as intended. The generic term used for these attacks is "denial of service". In many cases, these attacks are often referred to as a "DoS attack".

Amongst others, these attacks can be initiated by disgruntled employees or customers, but also by competitors, blackmailers or politically motivated perpetrators. The target of the attacks may be all kinds of business-relevant values. Typical forms of DoS attacks include:

This type of attack is often connected to the use of distributed resources, with the attacker placing such high demands on these resources that they are no longer available to the actual users. When IT-based attacks are conducted, for example, a shortage of the following resources can be artificially induced: processes, CPU time, memory, disk space, transfer capacity.

Example:

Kwistjonijiet marbuta

Links
Tip ta’ link Kwistjoni
is blocked by CON.8.A5 Secure System Design (B)
is blocked by CON.8.A6 Use of External Libraries from Trusted Sources (B)
is blocked by CON.8.A11 Drawing Up a Policy for Software Development (S)
is blocked by CON.8.A16 Appropriate Control of Software Development (S)
is blocked by OPS.1.2.4.A2 Security-Related Requirements for Teleworking Computers (B)
is blocked by OPS.1.2.5.A20 Remote Maintenance Operations (S)
is blocked by OPS.1.2.6.A7 Secure Configuration of NTP Clients (S)
is blocked by DER.1.A16 Use of Detection Systems in Accordance with Protection Requirements (H)
is blocked by DER.2.3.A1 Creation of a Management Committee (B)
is blocked by DER.2.3.A4 Blocking and Changing Access Data and Cryptographic Keys (B)
is blocked by DER.2.3.A7 Targeted System Hardening (S)
is blocked by APP.2.1.A2 Planning the Use of Directory Services [Data Protection Officer, Process Owner] (B)
is blocked by APP.2.1.A12 Monitoring Directory Services (S)
is blocked by APP.2.1.A14 Orderly Decommissioning of a Directory Service [Process Owner] (S)
is blocked by APP.2.1.A15 Migration of Directory Services (S)
is blocked by APP.2.2.A1 Planning Active Directory [Process Owner] (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A10 Secure Use of DNS for Active Directory (S)
is blocked by APP.2.2.A11 Monitoring Active Directory Infrastructure (S)
is blocked by APP.2.2.A12 Backups for Domain Controllers (S)
is blocked by APP.3.2.A3 Protecting File Uploads and Downloads (B)
is blocked by APP.3.2.A18 Protection Against Denial-of-Service Attacks (H)
is blocked by APP.3.6.A2 Deployment of Redundant DNS Servers (B)
is blocked by APP.3.6.A9 Creation of a Business Continuity Plan for DNS Servers (B)
is blocked by APP.3.6.A11 Sufficient Capacity of DNS Servers (S)
is blocked by APP.3.6.A20 Feasibility Reviews of Business Continuity Plans (H)
is blocked by APP.4.3.A11 Sufficient Hardware Capacity [Process Owner] (S)
is blocked by APP.4.3.A18 Database Management System Monitoring (S)
is blocked by APP.4.3.A22 Contingency Planning (H)
is blocked by APP.5.3.A2 Secure Operation of E-Mail Servers (B)
is blocked by SYS.1.1.A27 Host-Based Attack Detection (H)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A11 Attack Detection in Windows Server 2012 (H)
is blocked by SYS.1.5.A25 Minimal Use of Console Access to Virtual IT Systems (H)
is blocked by SYS.1.6.A1 Planning Container Use (B)
is blocked by SYS.1.6.A3 Secure Use of Containerised IT Systems (B)
is blocked by SYS.1.6.A6 Use of Secure Images (B)
is blocked by SYS.1.6.A9 Suitability for Container Operation (S)
is blocked by SYS.1.6.A10 Policy for Images and Container Operation (S)
is blocked by SYS.1.6.A15 Limitation of Resources per Container (S)
is blocked by SYS.1.6.A21 Extended Security Policies (H)
is blocked by SYS.1.6.A25 High Availability of Containerised Applications (H)
is blocked by SYS.1.6.A26 Advanced Isolation and Encapsulation of Containers (H)
is blocked by SYS.1.7.A1 Use of Restrictive z/OS IDs (B)
is blocked by SYS.1.7.A2 Protection of Security-Critical z/OS Utilities (B)
is blocked by SYS.1.7.A3 Maintenance of Z Systems (B)
is blocked by SYS.1.7.A14 Reporting on the Secure Operation of z/OS (S)
is blocked by SYS.1.7.A16 Monitoring of z/OS Systems (S)
is blocked by SYS.1.7.A23 Protection of z/VM (S)
is blocked by SYS.1.7.A31 Contingency Planning for z/OS Systems (S)
is blocked by SYS.1.7.A36 Internal Communication Between Operating Systems (H)
is blocked by SYS.1.7.A37 Parallel Sysplex in z/OS (H)
is blocked by SYS.1.7.A38 Use of the VTAM Session Management Exit in z/OS (H)
is blocked by SYS.2.1.A6 Using Malware Protection Programs (B)
is blocked by SYS.2.1.A15 Secure Installation and Configuration of Clients (S)
is blocked by SYS.2.1.A16 Disabling and Removing Unnecessary Components and IDs (S)
is blocked by SYS.2.1.A23 Preferences for Client-Server Services (S)
is blocked by SYS.2.1.A29 System and Client Monitoring (S)
is blocked by SYS.2.1.A31 Configuring Local Packet Filters (H)
is blocked by SYS.2.1.A32 Use of Additional Safeguards to Protect Against Exploits (H)
is blocked by SYS.2.1.A35 Active Administration of Root Certificates (H)
is blocked by SYS.4.4.A2 Authentication (B)
is blocked by SYS.4.4.A5 Restriction of Network Access (B)
is blocked by SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S)
is blocked by SYS.4.4.A7 Planning the Use of IoT Devices (S)
is blocked by SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S)
is blocked by SYS.4.4.A11 Using Encrypted Data Transmission (S)
is blocked by SYS.4.4.A13 Deactivation and Uninstallation of Unnecessary Components (S)
is blocked by SYS.4.4.A15 Restrictive Granting of Access Rights (S)
is blocked by SYS.4.4.A17 Monitoring Network Traffic on IoT Devices (S)
is blocked by SYS.4.4.A19 Protection of Administration Interfaces (S)
is blocked by SYS.4.4.A22 System Monitoring (H)
is blocked by IND.2.1.A6 Network Segmentation [OT Operations, Planner] (B)
is blocked by IND.2.1.A7 Creating Backups [OT Operations] (S)
is blocked by IND.2.1.A19 Security Tests [OT Operations] (H)
is blocked by IND.3.2.A3 Regular Checks and Exceptions for Existing OT Remote Maintenance Access (B) [IT Operation Department]
is blocked by IND.3.2.A5 Internal Coordination for OT Remote Maintenance with Office and Building IT (B) [Planner]
is blocked by NET.1.1.A11 Protection of Communications Entering the Internal Network from the Internet (B)
is blocked by NET.1.1.A14 Implementation of Network Planning (B)
is blocked by NET.1.1.A23 Separation of Network Segments (S)
is blocked by NET.1.1.A25 Detailed and Implementation Planning of Network Architecture and Design (S)
is blocked by NET.1.1.A29 Implementing Network Connections for High Availability (H)
is blocked by NET.1.1.A30 Protection Against Distributed Denial of Service (H)
is blocked by NET.1.2.A30 Implementing Management Solutions for High Availability (H)
is blocked by NET.1.2.A35 Specifications for Securing Evidence (H)
is blocked by NET.1.2.A36 Integration of Network Management Logging into an SIEM Solution (H)
is blocked by NET.1.2.A38 Specification of Forms of Emergency Operations for Network Management Infrastructure (H)
is blocked by NET.2.1.A4 Suitable Location of Access Points [Building Services] (B)
is blocked by NET.2.1.A12 Use of a Suitable WLAN Management Solution (S)
is blocked by NET.2.1.A13 Regular Security Checks of WLANs (S)
is blocked by NET.2.1.A14 Regular Audits of WLAN Components (S)
is blocked by NET.2.1.A18 Use of Wireless Intrusion Detection / Wireless Intrusion Prevention Systems (H)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A15 Bogon and Spoofing Filtering (S)
is blocked by NET.3.1.A16 Protection Against “IPv6 Routing Header Type-0” attacks (S)
is blocked by NET.3.1.A17 Protection Against DoS and DDoS Attacks (S)
is blocked by NET.3.1.A18 Configuration of Access Control Lists (S)
is blocked by NET.3.1.A19 Protection of Switch Ports (S)
is blocked by NET.3.1.A28 Use of Certified Products (H)
is blocked by NET.3.2.A2 Definition of Firewall Rules (B)
is blocked by NET.3.2.A3 Configuring Appropriate Filter Rules on the Packet Filter (B)
is blocked by NET.3.2.A16 Creation of a “P-A-P” structure (S)
is blocked by NET.3.2.A19 Protection Against TCP SYN Flooding, UDP Packet Storms, and Sequence Number Guessing on the Packet Filter (S)
is blocked by NET.3.2.A30 Bandwidth Management for Critical Applications and Services (H)
is blocked by NET.3.3.A9 Selection of Suitable VPN Products (S)
is blocked by NET.3.3.A11 Secure Integration of an External Network (S)
is blocked by NET.4.2.A4 Restricting Accessibility via VoIP (B)
is blocked by NET.4.2.A12 Secure Decommissioning of VoIP Components (S)
is blocked by NET.4.2.A15 Secure Media Transport Using SRTP (H)
is blocked by NET.4.2.A16 Network Separation for Data and VoIP (H)
is blocked by INF.14.A4 Consideration of Hazard Detection Systems in BACS (B) [Planner]
is blocked by INF.14.A6 Separation of BACS Networks (B) [Planner, IT Operation Department]
is blocked by INF.14.A10 Formation of Independent BACS Areas (S) [Planner]
is blocked by INF.14.A11 Securing Freely Accessible Ports and Access Points in BACS (S) [Planner]
is blocked by INF.14.A13 Network Segmentation in BACS (S) [Planner]
is blocked by INF.14.A20 Avoiding Broadcast Communication in BACS Networks (S) [Planner]