OWASP Automated Threats - OAT-015 Denial of Service
Introduction:
In this OWASP Automated Threat Article we'll be highlighting OAT-015 Denial of Service with some basic threat information as well as a recorded demo to dive into the concepts deeper. In our demo we'll explain how adversaries use DoS to impact applications and how a layered approach is what is required to protect your applications. We'll wrap it up by highlighting F5 Distributed Cloud Services to show how we solve this problem for our customers.
DoS Description:
Usage may resemble legitimate application usage, but leads to exhaustion of resources such as file system, memory, processes, threads, CPU, and human or financial resources. The resources might be related to web, application or databases servers or other services supporting the application, such as third party APIs, included third-party hosted content, or content delivery networks (CDNs). The application may be affected as a whole, or the attack may be against individual users such as account lockout.
OWASP Automated Threat (OAT) Identity Number
Threat Event Name
Denial of Service
Summary Defining Characteristics
Target resources of the application and database servers, or individual user accounts, to achieve denial of service (DoS).