Matching PILSsSC

URI: MP-PILSsSC

Package: ProcessComms

< prev | next >

Description: Finds a Process running on a Host connected via an Interface to a Logical Subnet, where the Process acts as a Service to at least one client communicating over that Interface, any of which is sufficient to cause a threat.

Root Pattern: R-PILS

R-PILS

Finds a Process running on a Host connected via an Interface to a Logical Subnet.

Threat Patterns (1)

P.O.PILSsSC.0

Service Service running on host SHost overloaded by messages from LogicalSubnet: if the interface between SHost and LogicalSubnet is overloaded, and service Service is listening for client messages on that interface, then the overload also affects Service.