Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

15. I Can’t Get No Satisfaction

Chapter Spotlight

• Denial-of-service attacks

• Causes: flooding, resource exhaustion, logical isolation (addressing problems), physical failure

• Intrusion detection and prevention systems

• Network monitoring

• Management: preparation for disruptions

• Distributed denial-of-service attacks: zombies or bots and command and control centers

Attack: Massive Estonian Web Failure 601

Threat: Denial of Service 602

Threat: Flooding 602

Threat: Blocked Access 603

Threat: Access Failure 604

Case: Beth Israel Deaconess Hospital Systems Down 605

Vulnerability: Insufficient Resources 606

Vulnerability: Addressee Cannot Be Found 611

Vulnerability: Exploitation of Known Vulnerability 613

Vulnerability: Physical Disconnection ...