Telecommunications facilities should be shielded from serious interference arising from unexpected behaviour that service users or the facilities of other organizations trigger, malware being one example. Servers, routers and other IP network facilities need protection against DDoS and similar attacks: mechanisms able to filter traffic or cap bandwidth per IP address, port and application protocol, backed as each service requires by signalling control, user authentication and access control. Against impersonation of the source: anti-spoofing measures for IP; tight password rules or strong authentication at user authentication systems (passwords that cannot be guessed and exceed a minimum length, one-time passwords, strong tokens) so that nobody can pose as a user by way of a stepping stone; and, for facilities carrying essential communications, mechanisms that stop caller ID being faked, such as terminal IDs fixed in hardware or checking the caller ID against a password set at registration and at connection. Against malformed signals, for instance packets of illegal length, drop them, because they can bring IP facilities down.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.