Control Strategy SuspendExcessiveClientAccess

URI: CSG-SuspendExcessiveClientAccess

Package: ProcessComms

< prev | next >

Description: Change from: Access to service Service by client Client may be temporarily disabled by the process manager ServiceManager to prevent the service forwarding excessive requests or becoming overloaded itself, at the cost of some reduction in availability. This strategy represents a contingency plan, which can be used to reduce risk from some threats. However, it also triggers other threats representing side effects of the policy change, based on how likely it is that the contingency plan will need to be activated.

Blocked Threats (4)

DF.O.CCDS2FC.0

Excessive flow of data Data via Client propagates via Service: if the flow of data Data from Client to Service is excessive, then Service will forward the excessive flow to StepTo.

DF.O.CCDS2TC.0

Excessive demand for data Data via Client propagates via Service: if the flow of data Data requested by Client from Service is excessive, then Service will forward the request for an excessive amount of data to StepFrom.

P.O.CCDFSFS.0

Excessive demand of data Data requested via Client overloads Service: if a request for an excessive amount of data Data reaches the data source Service, it may overload Service.

P.O.CCDFSTS.0

Excessive flow of data Data via Client overloads Service: if the flow of data Data reaching Service via Client is excessive, it may overload Service.

Triggers Threats (2)

CC.AX.CCDFSFS.6.4

Disabling excessive access by client Client to Service affects availability: access by client Client to service Service may be disabled to prevent excessive amounts of data being requested from the service, but this affects the availability of client-service connections.

CC.AX.CCDFSTS.6.4

Disabling excessive access by client Client to Service affects availability: access by client Client to service Service may be disabled to prevent excessive amounts of data being sent to the service, but this affects the availability of client-service connections.