3 ms·
As well as what others have said ("alarm fatigue") specifically to this case, I think it falls under the more general category of "Resource Exhaustion Attacks".
by xoa 5y ago
As well as what others have said ("alarm fatigue") specifically to this case, I think it falls under the more general category of "Resource Exhaustion Attacks". Most tech types think of those primarily in the context of DDOS. But the fundamental idea behind it, where an attacker doesn't exploit any specific weakness in the system but rather seeks to exhaust some finite consumable resource necessary to the system's operation, applies to a lot of different areas of modern society. And not just security either, humans in general have finite attention and mental resources. Rather then seek to convince people of any specific thing, or hack a forum or the like, attackers may seek to simply spam so much noise, or to use asymmetrical rhetorical hacks (argument is low energy to write but high energy to refute), that a target population runs out of energy to respond.
All security involves an economic equation of finite resources for both defenders and attackers. Defenders definitely have to consider the ratios there, and particularly if they've made any implicit assumptions of a given resource as unlimited (like in this case, a guard's tolerance for tech SNAFU bullshit).
- alexpetralia 5y agoWonderful explanation, thank you.