Example: SynFlood

concept SynFlood

requires

SynFlood: SF

NetworkAccess: NA

where
network_access(NA.true_src, SF.target)

report

Denial_of_Network_Service

(target <- SF.target) update_on

(port_set <- port_set + SF.port)

(start_time <- SF.time)

(stop_time <- SF.time) update

end.

Previous slide

Next slide

Back to first slide

View graphic version