Weakness (CWE)
CWE-410: Insufficient Resource Pool
Class Incomplete
The product's resource pool is not large enough to handle peak demand.
How to prevent it (5 mitigations)
-
Architecture and Design
Do not perform resource-intensive transactions for unauthenticated users and/or invalid requests.
-
Architecture and Design
Consider implementing a velocity check mechanism which would detect abusive behavior.
-
Operation
Consider load balancing as an option to handle heavy loads.
-
Implementation
Make sure that resource handles are properly closed when no longer needed.
-
Architecture and Design
Identify the system's resource intensive operations and consider protecting them from abuse (e.g. malicious automated script which runs the resources out).
Source: MITRE CWE-410
0 results · Clear filters · Feed
Nothing found.