Trustworthiness Attribute BandwidthManaged

URI: BandwidthManaged

Package: NetworkConnectivity

< prev | next >

Description: Signifies that bandwidth used by message flows through an interface can be restricted based on their source and/or destination addresses.

This attribute is undermined by the misbehaviour BandwidthUnmanaged

Threats (2)

P.O.DDoS.3

Distributed DoS attack on service Process from subnet LogicalSubnet: an attacker with control over multiple vulnerable systems connected to LogicalSubnet can use them to send excessive messages via a privileged network paths through firewalls and overload service Process. The best defence is to arrange with your ISP to manage and restrict the traffic sent from the Internet (check threat causes for an unrestricted network interface).

P.O.DoS.3

DoS attack on service Process from subnet LogicalSubnet: an attacker with access to LogicalSubnetcan exploit a privileged network path through firewalls allowing access to service Process, sending too many messages and overloading Process. The best defence is to manage and restrict the traffic sent to the service at one of the inbound network interfaces (check threat causes for unrestricted network interfaces).