{
  "node_id": "mitre-capec-capec-482-tcp-flood",
  "title": "MITRE CAPEC-482: TCP Flood (Standard Attack Pattern)",
  "domain": "Cybersecurity",
  "version": "1.0.0",
  "last_updated": "2026-05-25",
  "bluf": "MITRE CAPEC-482 (TCP Flood) is a standard-level attack pattern in the MITRE Common Attack Pattern Enumeration and Classification. An adversary may execute a flooding attack using the TCP protocol with the intent to deny legitimate users access to a service. These attacks exploit the weakness within the TCP protocol where there is some state information for the connection the server needs to maintain. This often involves the use of TCP SYN messages. Likelihood of attack: Unknown. Maps to weaknesses CWE-770. Relates to MITRE ATT&CK T1498.001, T1499.001, T1499.002.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "mitre_attack"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-sp-800-53-r5",
    "iso-27001-2022",
    "cis-controls-v8",
    "owasp-asvs-l2",
    "mitre-attack-t1498-network-denial-of-service",
    "mitre-attack-t1499-004-application-or-system-exploitation"
  ],
  "primary_citations_count": 10
}