Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Denial of service attacks ("DoS", hereafter) attempt to make a computer resource unavailable or insufficiently available to its intended users. Such attacks are generally of greater concern for persistent, server-type systems than for desktop applications; nevertheless, DoS issues can arise for all classes of application.

Denial of Service Through Resource Exhaustion

Denial of service can occur when resource usage is disproportionately large in comparison to the input data that causes the resource usage. Checking inputs for excessive resource consumption may be unjustified for client software that expects the user to handle resource-related problems. Even such client software, however, should check for inputs that could cause persistent denial of service, such as filling up the file system.

...

Content by Label
showLabelsfalse
maxResults99
label+resource-exhaustion,-void
showSpacefalse
sorttitle
space@self
cqllabel = "resource-exhaustion" and label != "void" and space = currentSpace()

Concurrency-Related Denial of Service

Some DoS attacks operate by attempting to induce concurrency-related problems such as thread deadlock, thread starvation, and race conditions.

...

Content by Label
showLabelsfalse
maxResults99
label+dos-cc,-void
showSpacefalse
sorttitle
space@self
cqllabel = "dos-cc" and label != "void" and space = currentSpace()

Other Denial of Service attacks

Additional rules regarding prevention of denial of service attacks include:

...