Educause Security Discussion mailing list archives
Slow-read DOS
From: "HOGGATT, ANDY F." <hoggatta () OTC EDU>
Date: Tue, 17 Jan 2012 14:06:40 -0600
Greetings all, We have been experiencing DOS issues today relating to the "slow http" method (see article below). Has anyone else been experiencing these attacks or have any knowledge, or experience on defending against these? They seem to be very sporadic. The access logs have the following entry in the HTTP header : "FAKEVERB / HTTP/1.1" 301 227 http://code.google.com/p/slowhttptest/ Feel free to email me directly, if you'd prefer. http://www.darkreading.com/advanced-threats/167901091/security/attacks-breaches/232301367/new-denial-of-service-attack-cripples-web-servers-by-reading-slowly.html Thank you, Andy Hoggatt hoggatta () otc edu
Current thread:
- Slow-read DOS HOGGATT, ANDY F. (Jan 17)
- Re: Slow-read DOS Nathaniel Hall (Jan 17)
- Re: Slow-read DOS Seth Hall (Jan 21)