HTTP Time Bandit
Explore an in-depth analysis of HTTP-based Denial of Service (DoS) attacks and their countermeasures in this conference talk from BruCON 0x05. Delve into various DoS classifications, including classic application layer attacks and Get Flooding techniques. Learn about a proposed method for normalizing data using statistical analysis, and witness a live demonstration of attack testing and service degradation measurement. Examine the role of load balancers and commercial protection services in mitigating these threats. Discover how to leverage the presented tools for identifying and fixing resource-intensive elements within web applications. Investigate Apache configurations and modules such as mod_security, mod_limitipconn, and mod_qos for enhancing protection against DoS attacks. Gain insights into the conflicts between certain modules and Slow* attacks, and explore future directions in HTTP-based DoS prevention.