Web applications are commonly vulnerable to several Distributed Denial of Service attacks, sometimes in unexpected ways. An example is the SlowLoris attack, an exploit that leads to service interruption by simply sending the data to the server as slowest as possible. In this talk Paolo tells the tale of how it took almost 13 years for Node to be completely protected by SlowLoris attack. He also demonstrates that sometimes prioritizing performance can lead to incorrect fixes that can result in a false sense of protection.
🗣️ Join the DevSecOps Community on our Discord channel to discuss this talk with other security-focused practitioners! https://devseccon.io/discordcommunity
