CAPEC Definitions

    CAPEC Definitions / CAPEC-590

    CAPEC-590: IP Address Blocking

    An adversary performing this type of attack drops packets destined for a target IP address. The aim is to prevent access to the service hosted at the target IP address.

    Severity:High
    Possibility:Low

    Extended Description

    No Extended Description.

    Mitigations

    Have a large pool of backup IPs built into the application and support proxy capability in the application.

    Relationships with other CAPECs

    CAPEC-603: Blockage

    Details

    Prerequisites

    This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.

    Related Weaknesses

    CWE-300: Channel Accessible by Non-Endpoint

    Details