Application DDoS Mitigation

Distributed Denial of Service (DDoS) and Denial of Service (DoS) attacks can be classified in several categories and can be either volumetric or application based. By far, volumetric attacks have been the most popular types of DoS attacks, as readily available tools such as LOIC and HOIC can make it fairly easy to mount an attack. Application attacks that leverage allowed security policies have been gaining popularity as they are very difficult to guard against and can have the same detrimental effect in bringing down critical services.

This document will discuss the primary differences between volumetric and application DoS attacks and will show you how Palo Alto Networks custom vulnerability signatures and security policies can be used to effectively identify and mitigate application based DoS attacks.