~/talk

HTTP Time Bandit

Talkat AppSecUSA 2013 · 2013-11-20..11-21· [security, web-performance]
links:none on file
slides:none on file

A crawler measures per-URL download times, computes mean and standard deviation, and flags consistently slow endpoints for focused load trials; results are emitted as XML output and a Graphviz map. The tool reruns targeted tests with more sampling (example: 100 probes) to confirm true CPU/DB hogs and can run in parallel (demo used three instances) to drive an Apache box to ~98% CPU while the client stays near 9%. Code is published on GitHub.

AI-written summary · about

  1. 0:00Introduction
  2. 0:25Who are we
  3. 1:07Agenda
  4. 1:34Why do we do this
  5. 2:16Taxonomy
  6. 7:34Exotic Authority
  7. 9:05Proposed Method
  8. 11:54Formal Method
  9. 12:43Linux
  10. 13:05Example
  11. 15:09Graph
  12. 18:16symmetric nature
  13. 18:52attack
  14. 19:02testing
  15. 19:42other tools
  16. 21:16what do we do
  17. 23:12load balancers
  18. 24:51a proxy
  19. 25:54protection services
  20. 29:22baseline
  21. 30:30security
  22. 31:52maximum connections
  23. 32:22mod2s
  24. 32:46settingstart
  25. 34:08Resource Consumption
  26. 34:37Motivation
  27. 34:59Evasion
  28. 36:17Honeypot
  29. 36:55Bad Times Many
  30. 38:29Tools
  31. 38:49Paper summation
  32. 41:17Conclusion
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.