Low rate attack
Attack aimed at bringing a target down but doing so
quietly. This is much different than high rate brute force attacks. These
attacks often aim at leaving connections open on the target by creating a
relatively low number of connections over a period of time and leaving those
sessions open for as long as possible. Common methods include sending partial
http requests, such as Slowloris, and Slowpost (a DDoS tool which completes the
handshake) and sending small data packets or keep alives in order to keep the
session from going to idle timeout. These attack vectors are often intermingled
with the high rate volumetric attacks and fly under the radar making them not
only very hard to block but also to detect.
DDoSPedia Index