UCF STIG Viewer Logo

Applications must protect against or limit the effects of the organization-defined or referenced types of Denial of Service (DoS) attacks.


Overview

Finding ID Version Rule ID IA Controls Severity
V-35646 SRG-APP-000245-MAPP-NA SV-46933r1_rule Medium
Description
A variety of technologies exist to limit, or in some cases, eliminate the effects of DoS attacks. For example, boundary protection devices can filter certain types of packets to protect devices on an organization's internal network from being directly affected by DoS attacks. Employing increased capacity and bandwidth combined with service redundancy may reduce the susceptibility to some DoS attacks. Rationale for non-applicability: Mobile applications are lightweight and are not expected to have embedded mechanisms to protect against DoS, most of which cannot be known prior to the exploited vulnerability. The mobile operating system has a variety of mechanisms, including application sandboxing and memory management, to protect against application-based DoS attacks.
STIG Date
Mobile Application Security Requirements Guide 2013-01-04

Details

Check Text ( C-43988r1_chk )
This requirement is NA for the MAPP SRG.
Fix Text (F-40188r1_fix)
The requirement is NA. No fix is required.