Denial of Service
We perform a denial of service attack when we stop something from being able to do its job. We can do this in a number of ways; it might be that you cause the system to crash, cause it to be unreachable, or stop it from performing some task. The system being attacked could be either a service or a client. We should also note that a client doesn’t necessarily mean a browser but could also be a service talking to another service.
Figure 6.1: Service is being denied to the devices because of an attack
In this chapter, we’ll look at several denial of service threats. It is important to keep in mind that denial of service is not only caused by attackers, but it can also be human error, file corruption, bad planning, or even an outage of a service your application depends upon. As in previous chapters, I’ll give you references from CAPEC, ASVS, and CWE with each example where you can get more information. I will also suggest...