COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-590

IP Address Blocking

An adversary performing this type of attack drops packets destined for a target IP address. The aim is to prevent access to the service hosted at the target IP address.

Abstraction

Detailed

Typical severity

High

Likelihood of attack

Low

Understand the attack

What is this attack pattern?

An adversary performing this type of attack drops packets destined for a target IP address. The aim is to prevent access to the service hosted at the target IP address.

Requirements

What does the attack require?

Prerequisites

  • This attack requires the ability to conduct deep packet inspection with an In-Path device that can drop the targeted traffic and/or connection.

Skills required

Not stated in the MITRE record.

Resources required

Not stated in the MITRE record.

Impact

What does a successful attack lead to?

Other

Affected scopes: Availability

Defence

How is it prevented and mitigated?

1
Have a large pool of backup IPs built into the application and support proxy capability in the application.

Real world

MITRE example instances

Example instance 1Detail
Consider situations of information censorship for political purposes, where regimes that prevent access to specific web services.