Attack scenario
DDoS and resource exhaustion
An adversary floods a network, application, API, or endpoint and exhausts capacity, connections, or compute resources to reduce service availability.
Why this scenario matters
The attack may target bandwidth, network protocols, application requests, or a specific service. It often combines traffic volume with a carefully selected application vector and may accompany extortion or diversion activity.
Readiness requires coordination across DDoS protection, NGFW, WAF, rate limiting, DNS, performance monitoring, capacity planning, and incident procedures with connectivity providers.
The scenario uses MITRE ATT&CK® as a reference model. It is an expert SecTec interpretation and does not imply endorsement by MITRE.
Relevant ATT&CK tactics
- Defense Impairment
- Impact
Relevant ATT&CK techniques
SecTec technologies and vendors
The following hierarchy is derived from the approved ATT&CK-to-technology and technology-to-vendor mappings.