safemode.space
← MITRE ATT&CK Enterprise
T1499.003
enhancement

Application Exhaustion Flood

Parent: T1499

Description

Adversaries may target resource intensive features of applications to cause a denial of service (DoS), denying availability to those applications. For example, specific features in web applications may be highly resource intensive. Repeated requests to those features may be able to exhaust system resources and deny access to the application or the server itself.(Citation: Arbor AnnualDoSreport Jan 2018)

Mapped SPARTA techniques

2 techniques

  • EX-0013.01Valid CommandsST0004
    addresses
    moderate

    Flooding with valid commands (well-formed but excessive volume) exhausts application-level resources — T1499.003 'Application Exhaustion Flood' covers this exact class of valid-protocol-flooding. Cross-tactic moderate (impact vs execution).

  • EX-0013.02Erroneous InputST0004
    addresses
    moderate

    Flooding with erroneous/malformed input causes application exhaustion through error-handling paths and parsing overhead — T1499.003 'Application Exhaustion Flood' covers this malformed-input-flooding class. Cross-tactic moderate.

Cite as SafeMode Space, mitre-attack-enterprise T1499.003.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.