Exam 312-50v11 topic 1 question 187 discussion

Slowloris Attack Slowloris is a DDoS attack tool used to perform layer-7 DDoS attacks to take down web infrastructure. It is distinctly different from other tools in that it uses perfectly legitimate HTTP traffic to take down a target server. In Slowloris attacks, the attacker sends partial HTTP requests to the target web server or application. Upon receiving the partial requests, the target server opens multiple connections and waits for the requests to complete. However, these requests remain incomplete, causing the target server’s maximum concurrent connection pool to be filled up and additional connection attempts to be denied. CEHv11 page 1322

DoS/DDoS Attack Vectors - Application Layer Attacks Slowloris attack In the Slowloris attack, the attacker sends partial HTTP requests to the target web server or application.Upon receiving the partial HTTP requests, the target server opens multiple open connections and keeps waiting for the requests to complete.These requests will not be complete, and as a result, the target server’s maximum concurrent connection pool will be exhausted, and additional connection attempts will be denied. (P.1320/1304)

Slowloris is an application layer DDoS attack which uses partial HTTP requests to open connections between a single computer and a targeted Web server, then keeping those connections open for as long as possible, thus overwhelming and slowing down the target. This type of DDoS attack requires minimal bandwidth to launch and only impacts the target web server, leaving other services and ports unaffected. Slowloris DDoS attacks can target many type of Web server software, but has proven highly-effective against Apache 1.x and 2.x. https://www.netscout.com/what-is-ddos/slowloris-attack

correct

Answer is Slowloris attack The following are examples for application layer attack techniques: *Hypertext Transfer Protocol (HTTP) flood attack *Slowloris attack *UDP application layer flood attack

Slowloris is an application layer DDoS attack which uses partial HTTP requests to open connections between a single computer and a targeted Web server, then keeping those connections open for as long as possible, thus overwhelming and slowing down the target. https://www.netscout.com/what-is-ddos/slowloris-attacks