A mitigation technique is a measure implemented to protect against threats by reducing the likelihood or impact of a vulnerability. It supports the security goals of confidentiality, integrity, and availability. section 11.1.2 section 11.6
Separate mitigation from the related security terms:
- A vulnerability is a potential weakness that can compromise system or data security. section 11.1.2
- An exploit is something that can take advantage of a vulnerability. section 11.1.2
- A threat is the real possibility that a vulnerability will be exploited. section 11.1.2
- A mitigation is the protective measure applied against the threat. section 11.1.2
Network example
DHCP has vulnerabilities that can be exploited with tools. A malicious user attempting to harm network confidentiality, integrity, or availability is a threat; DHCP Snooping is a mitigation technique that protects against such threats. section 11.1.2
