Sciweavers

Share
PAM
2010
Springer

Web Timeouts and Their Implications

9 years 4 months ago
Web Timeouts and Their Implications
Abstract. Timeouts play a fundamental role in network protocols, controlling numerous aspects of host behavior at different layers of the protocol stack. Previous work has documented a class of Denial of Service (DoS) attacks that leverage timeouts to force a host to preserve state with a bare minimum level of interactivity with the attacker. This paper considers the vulnerability of operational Web servers to such attacks by comparing timeouts implemented in servers with the normal Web activity that informs our understanding as to the necessary length of timeouts. We then use these two results—which generally show that the timeouts in wide use are long relative to normal Web transactions—to devise a framework to augment static timeouts with both measurements of the system and particular policy decisions in times of high load.
Zakaria Al-Qudah, Michael Rabinovich, Mark Allman
Added 18 May 2010
Updated 18 May 2010
Type Conference
Year 2010
Where PAM
Authors Zakaria Al-Qudah, Michael Rabinovich, Mark Allman
Comments (0)
books