Projects/OWASP WS Amplification DoS Project

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP WS Amplification DoS Project (home page) Purpose: The project aims to explore the threat of an Amplification DoS attack that utilises webservices. Currently, DNS servers are widely misused to amplify DoS traffic. This is called a DNS Amplification or Reflective attack. Read more about it in this article: http://blog.cloudflare.com/deep-inside-a-dns-amplification-ddos-attack. It appears that SOAP webservices that implement WS-Addressing might be vulnerable to similar abuse. (http://www.fim.uni-passau.de/fileadmin/files/lehrstuhl/meer/publications/pdf/Jensen2009a.pdf) The aim of the project is to develop tools to test this vulnerability and determine the threat magnitude on a global scale. If necessary, a publication involving awareness and countermeasures will follow. License: Apache 2.0 License (fewest restrictions, even allowing proprietary modifications and proprietary forks of your project) who is working on this project? Project Leader(s): Thomas Vissers @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Key Contacts Contact Thomas Vissers @ to contribute to this project Contact Thomas Vissers @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases