Best Practice Detail

13-9-8523

Network Operators, Service Providers should 1) Turn on logging where appropriate to analyze the logs, 2) Implement the appropriate filter and access list to discard the attack traffic 3) Utilize DoS/DDoS tracking methods to identify the source of attack if the control plane is under attack.

Status: Rollover New

References/Comments: IETF RFC2350, CMU/SEI-98-HB-001. Note: This Best practice could impact 9-1-1 operations.

Historical events:

• Network Operators
• Service Providers
• Cable
• Internet/Data
• Wireless
• Cyber Security
• Disaster Recovery
• Emergency Preparedness
• CSRIC VII: Rollover New In CSRIC VII