This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Denial of Service Cheat Sheet
Last revision (mm/dd/yy): 03/20/2017
Introduction
This article is focused on providing clear, simple, actionable defense guidance for preventing denial of service in your web applications. Denial of Service attacks are very common due to two factors :
- The significant prevalence of cloud and web services
- Easy to get testing tools to cause denial of service attacks.
Because it's very simple to launch the DOS attack, any web services don't have Anti-DOS defenses mitigation in place will be vulnerable to DOS attacks.
To avoid and mitigate DOS attack, both developers and operations engineering will need to have layered of defenese in place - a) Service: Input validation b) Web Host: c) Infrastructure:
This objective of the article is to provide a list of common techniques for preventing DOS attack regardless of technology and platforms.
Primary Defenses
Defense Option 1: xxxx
Defense Option 2: xxxx
Related Articles
Authors and Primary Editors
Tony Hsu - hsiang_chih[at]yahoo.com