A DDOS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers…

Question

Options

• ADesynchronization
• BSlowloris attack
• CSession splicing
• DPhlashing

• A
  3% (1)
• B
  94% (30)
• C
  3% (1)

Explanation

Slowloris Attack Explained

Slowloris is a Layer 7 (Application Layer) HTTP denial-of-service attack that works by sending partial, never-completed HTTP requests to a target web server, causing it to hold open thousands of connections simultaneously while waiting for those requests to finish - ultimately exhausting the server's connection pool and making it unavailable to legitimate users.

Why the distractors are wrong:

• A. Desynchronization refers to a TCP session hijacking technique that exploits sequence number mismatches between client and server - not partial HTTP requests.
• C. Session splicing is an IDS evasion technique where attack payloads are split across multiple packets to bypass inspection - unrelated to holding open HTTP connections.
• D. Phlashing (also called a Permanent DoS) involves sending malicious firmware updates to permanently damage hardware - a completely different attack vector.

Memory Tip: Think of Slowloris like a slow customer who walks into a shop, starts asking a question, and never finishes - forcing the staff member to stand there waiting indefinitely while real customers are turned away. The name itself hints at it: slow + loris (a slow-moving animal) = a slow, lingering attack.

No community discussion yet for this question.