2011/6/29 coderman <[email protected]>: > 2011/6/26 김무성 <[email protected]>: >> ... >> I'm looking for meterials or information, research about that how to detect >> DDoS attack through HTTP response analysis(throuput). > > you're asking the wrong question. > > instead of asking "How can I automagically detect exploitation of my > shitty app via HTTP Resp. codes" > > ask: "Why is my webapp so shitty that any number of arbitrary requests > lead to resource exhaustion?" >
because fetching(or imitating to fetch) the result is always less resource intense than generating it? o_O Tyrael _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
