CAPEC-594: Traffic Injection
Description
An adversary injects traffic into the target's network connection. The adversary is therefore able to degrade or disrupt the connection, and potentially modify the content. This is not a flooding attack, as the adversary is not focusing on exhausting resources. Instead, the adversary is crafting a specific input to affect the system in a particular way.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Not rated by MITRE
- Abstraction
- MetaA decidedly abstract characterisation of a methodology or technique.
Mechanism of attack: Inject Unexpected Items
Prerequisites
- The target application must leverage an open communications channel.
- The channel on which the target communicates must be vulnerable to interception (e.g., adversary in the middle attack - CAPEC-94).
Consequences
- Availability
Unreliable Execution
The injection of specific content into a connection can trigger a disruption in that communications channel, thereby denying availability of the service.
- Integrity
Other
An adversary's injection of additional content into a communication channel negatively impacts the integrity of that channel.
Mitigations
CAPEC 3.9 lists no mitigation for this pattern; see its child patterns or related weaknesses.