~/talk

Load-fire exercises on queries

TalkinRussianat HighLoad++ Moscow 2018 · 2018-11-08..11-09· [security, testing]
links:none on file
links:none on file
slides:none on file

Overview of techniques used for load-testing and those observed in real web attacks, focusing on methods for generating and handling high-load request floods. Covers practical testing approaches and examples of attack patterns applied to websites.

AI-written summary · about

  1. 0:00Introduction
  2. 1:30Why stress testing
  3. 3:37Five key principles
  4. 6:06Load vs stress testing
  5. 7:08Application-level attacks
  6. 10:20Finding vulnerabilities
  7. 12:49Authorization attacks
  8. 15:19Search and DB load
  9. 17:31REST API vulnerabilities
  10. 18:36Heavy content attacks
  11. 19:38Weak servers and configs
  12. 20:20Wave attacks and impacts
  13. 21:45Peak load issues
  14. 24:35Attack synchronization problems
  15. 24:57Network-level attacks
  16. 26:23Measuring packet load
  17. 28:50IP blocking issues
  18. 31:01Testing tools
  19. 33:06Partner testing mistakes
  20. 34:50Protection recommendations
  21. 36:37Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.