R.U.D.Y. Attack (R-U-Dead-Yet?)
R.U.D.Y. attack (R-U-Dead-Yet?) is a slow-rate HTTP POST (Layer 7)
tool created by Raviv Raz and named after the Children of Bodom album "Are You Dead Yet?" It achieves denial-of-service by using long form field submissions. By injecting one byte of information into an application POST field at a time and then waiting, a R.U.D.Y. attack causes application threads to await the end of never-ending posts in order to perform processing (this behavior is necessary in order to allow web servers to support users with slower connections). Since R.U.D.Y. (R-U-Dead-Yet?) causes the target webserver to hang while waiting for the rest of an HTTP POST request, by initiating simultaneous connections to the server the attacker is ultimately able to exhaust the server's connection table and create a denial-of-service condition.