Denial of Service
What is Denial of Service?
An attack that disrupts normal functioning of a targeted server, service, or network by overwhelming it with a flood of traffic or requests.
Terms that appear alongside denial of service
Each of these is named in at least one of the same controls as denial of service. The number is how many controls name both.
- availability 8 shared controls
- access control 4 shared controls
- distributed denial of service 4 shared controls
- incident response 4 shared controls
- resilience 3 shared controls
- ransomware 3 shared controls
- policy 3 shared controls
- disruption 2 shared controls
Frameworks that govern denial of service
What the standards actually require on denial of service
Requirements naming denial of service across 6 standards, quoted from the control text.
A denial of service response plan for video conferencing and IP telephony services is developed, implemented and maintained.
ISM-1019 · Denial of service response plan for communications →Manage capacity, bandwidth, or other redundancy to limit the effects of information flooding denial-of-service attacks.
NIST800-SC-5(2) · SC-5(2) Denial-of-service Protection | Capacity, Bandwidth, and Redundancy →When a DoS event forces the control system into a degraded mode, it shall keep its essential functions running. RE 1 requires managing communication loads; RE 2 requires limiting the effects of DoS on other systems or networks.
iec-62443::SR 7.1 · Denial of service protection →The CBS shall keep essential functions going during denial-of-service events, possibly degraded but never failing hazardously, with network flooding and exhaustion of computing resources considered. (from SR 7.1 of IEC 62443-3-3)
iacs-unified-requirements-e26e27-cyber-resilience-of-ships-and-on-board-systems::E27-4.1-24 · E27 item 24: Denial of service protection →Security Dimension 7 Availability per X.805 Clause 6.7: Availability means that events affecting the network do not stop authorized users from reaching the services, applications, information flows, stored information and network elements they are entitled to....
X805-Dim7-Availability-Network-Resources-Information-Authorized-Access-No-Service-Denial · ITU-T X.805 Security Dimension 7 - Availability + Network Resources + Information Accessible to Authorized Users + Denial-of-Service Prevention + Resilience + Redundancy + Disaster Recovery + Business Continuity + DDoS Mitigation →Plan for denial of service conditions on signaling and user plane interfaces. Apply rate limiting on attach storms, dimension MME and SGW capacity headroom, and have a documented response for paging amplification attempts.
SP800-187-3.14 · Denial of Service Mitigation →Questions people ask about denial of service
What is Denial of Service?
Why is Denial of Service important for compliance?
Which compliance frameworks address Denial of Service?
Where can I learn more about Denial of Service?
See how Denial of Service applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.