This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Early Amplification"
From OWASP
| (10 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | {{ | + | {{template:CandidateForDeletion}} |
| + | |||
| + | #REDIRECT [[::Category:Attack]] | ||
| − | |||
| − | |||
Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | Last revision (mm/dd/yy): '''{{REVISIONMONTH}}/{{REVISIONDAY}}/{{REVISIONYEAR}}''' | ||
| − | |||
| − | + | ==Description== | |
| − | |||
| + | Allows a legitimate but expensive operation before the entity has proven that the operation should be allowed. | ||
| − | + | PLOVER Early Amplification. | |
| − | + | * Attackers try to launch a denial of service attack by performing the unprotected expensive operations repeatly | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
==Risk Factors== | ==Risk Factors== | ||
| − | + | TBD | |
| − | |||
| − | |||
| − | |||
==Examples== | ==Examples== | ||
| − | + | TBD | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
==Related [[Attacks]]== | ==Related [[Attacks]]== | ||
| − | * [[ | + | * [[Denial of Service]] |
| − | |||
| Line 48: | Line 32: | ||
* [[Vulnerability 1]] | * [[Vulnerability 1]] | ||
* [[Vulnerabiltiy 2]] | * [[Vulnerabiltiy 2]] | ||
| − | |||
| − | |||
==Related [[Controls]]== | ==Related [[Controls]]== | ||
| − | * [[ | + | * [[Authentication]] |
| − | |||
| − | |||
| − | |||
| − | |||
==Related [[Technical Impacts]]== | ==Related [[Technical Impacts]]== | ||
| Line 67: | Line 45: | ||
==References== | ==References== | ||
| − | + | TBD | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
__NOTOC__ | __NOTOC__ | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
Latest revision as of 16:52, 11 April 2009
#REDIRECT :Category:Attack
Last revision (mm/dd/yy): 04/11/2009
Description
Allows a legitimate but expensive operation before the entity has proven that the operation should be allowed.
PLOVER Early Amplification.
- Attackers try to launch a denial of service attack by performing the unprotected expensive operations repeatly
Risk Factors
TBD
Examples
TBD
Related Attacks
Related Vulnerabilities
Related Controls
Related Technical Impacts
References
TBD
