@@ -1494,6 +1494,33 @@ All sources of data processed by the product in its secure-by-default configurat
See Section 5.3 for which mitigations are necessary for which security profiles and Annex C.4 for the rationale.
### 5.2.X **TR-AVAI**: Availability
#### 5.2.X.x Requirement
The product shall protect the availability of essential and core functions.
#### 5.2.X.x **MI-AVNT**: Availabilty of network services
The product shall protect the availability of essential and core network services through mitigation of denial-of-service attacks.
* Reference: TR-AVAI
* Objective: Protect availability of network functions
* Preparation: List all network services and identify essential and core network services
* Activities: For each essential or core network service, examine the documentation for how the product sufficiently mitigates denial-of-service attacks for its risk assessment
* Verdict: Every essential or core network service is documented and the mitigations are sufficient => PASS, otherwise FAIL
* Evidence: All configuration files for network services, documentation of network services and the ways to mitigate a denial-of-service attack on it, internal lists of listening ports, results of an external port scan
@@ -1724,33 +1751,6 @@ The product shall mitigate abuse of network services that amplify network traffi
| IoT-2, IoT-3 | MNET |
| all others | MNET, MAMP |
### 5.2.X **TR-AVAI**: Availability
#### 5.2.X.x Requirement
The product shall protect the availability of essential and core functions.
#### 5.2.X.x **MI-AVNT**: Availabilty of network services
The product shall protect the availability of essential and core network services through mitigation of denial-of-service attacks.
* Reference: TR-AVAI
* Objective: Protect availability of network functions
* Preparation: List all network services and identify essential and core network services
* Activities: For each essential or core network service, examine the documentation for how the product sufficiently mitigates denial-of-service attacks for its risk assessment
* Verdict: Every essential or core network service is documented and the mitigations are sufficient => PASS, otherwise FAIL
* Evidence: All configuration files for network services, documentation of network services and the ways to mitigate a denial-of-service attack on it, internal lists of listening ports, results of an external port scan
| Risk factors | Requires mitigations |
|---------------------|----------------------|
| TNET < 1 & FNET < 1 | none |
| all others | AVNT |
| Security Profile | Requires mitigations |
|------------------|----------------------|
| LR, IoT-1 | none |
| all others | AVNT |
### 5.2.X Additional requirements
> TODO: Look at the [notes.md](notes.md) document for ideas for requirements to write.
