T1499.003: Application Exhaustion Flood

MITRE ATT&CK® Enterprise technique

Description

Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications. For example, specific features in web applications may be highly resource intensive. Repeated requests to those features may be able to exhaust system resources and deny access to the application or the server itself.(Citation: Arbor AnnualDoSreport Jan 2018)

Detection

(no detection guidance published)

Data sources

• (none listed)

References

• ATT&CK page: https://attack.mitre.org/techniques/T1499/003
• ATT&CK Enterprise matrix: https://attack.mitre.org/matrices/enterprise/