@article{2007_CRITIS_LoRDAS,
author = "Maci{\'a}-Fern{\'a}ndez, Gabriel  and Jes{\'u}s Esteban D{\'i}az Verdejo and Garc{\'i}a-Teodoro, Pedro  and Francisco de Toro Negro",
abstract = "In a communication network, there always exist some specific
servers that should be considered a critical infrastructure to be protected,
specially due to the nature of the services that they provide. In this
paper, a low-rate denial of service attack against application servers is
presented. The attack gets advantage of known timing mechanisms in the
server behaviour to wisely strike ON/OFF attack waveforms that cause
denial of service, while the traffic rate sent to the server is controlled,
thus allowing to bypass defense mechanisms that rely on the detection of
high rate traffics. First, we determine the conditions that a server should
present to be considered a potential victim of this attack. As an example,
the persistent HTTP server case is presented, being the procedure for
striking the attack against it described. Moreover, the efficiency achieved
by the attack is evaluated in both simulated and real environments, and
its behaviour studied according to the variations on the configuration
parameters. The aim of this work1 is to denounce the feasibility of such
attacks in order to motivate the development of defense mechanisms.",
issn = "0302-9743",
journal = "Lect. Notes in Computer Science",
pages = "197-209",
title = "{L}o{RDAS}: {A} {L}ow-{R}ate {D}o{S} {A}ttack against {A}pplication {S}ervers",
url = "http://ceres.ugr.es/~gmacia/papers/CRITIS07_PublishedVersion.pdf",
volume = "5141",
year = "2008",
}