Misbehaviour BandwidthUnmanaged

URI: BandwidthUnmanaged

Package: NetworkConnectivity

< prev | next >

Description: Signifies that bandwidth used by message flows through an interface cannot be restricted based on their source and/or destination addresses.

This misbehaviour affects the trustworthiness attribute BandwidthManaged

Threats that cause this misbehaviour (1)

I.M.I.8

Message traffic from LogicalSubnet via Host is unconstrained: if the interface between Host and LogicalSubnet is in service, then traffic that is not blocked will not be subject to any bandwidth limits unless controls are used to impose such limits.

Threats caused by affected trustworthiness attribute (2)

P.O.DDoS.3

Distributed DoS attack on service Process from subnet LogicalSubnet: an attacker with control over multiple vulnerable systems connected to LogicalSubnet can use them to send excessive messages via a privileged network paths through firewalls and overload service Process. The best defence is to arrange with your ISP to manage and restrict the traffic sent from the Internet (check threat causes for an unrestricted network interface).

P.O.DoS.3

DoS attack on service Process from subnet LogicalSubnet: an attacker with access to LogicalSubnetcan exploit a privileged network path through firewalls allowing access to service Process, sending too many messages and overloading Process. The best defence is to manage and restrict the traffic sent to the service at one of the inbound network interfaces (check threat causes for unrestricted network interfaces).