What is slowloris in SAP BC-CST - Client/Server Technology?

SAP Term: slowloris

• Component: BC-CST

• Component Name: Client/Server Technology

• Description: Slowloris is a software used to attack on a web server that attempts to open a large number of connections and keep those connections open for as long as possible. A web server can only provide service to a finite number of clients. So, when the Slowloris attack has consumed all of the available connections on the server, clients are unable to reach sites on the web server.

Smart SAP Assistant

• Key Concepts: 
  Slowloris is a type of denial-of-service attack that works by sending partial HTTP requests to a web server. It works by sending a partial request and then waiting for the server to close the connection before sending another request. This can cause the server to become overloaded and unable to respond to legitimate requests.
  
  How to use it: 
  Slowloris is used by attackers to overwhelm a web server with requests, causing it to become unresponsive. It is typically used in conjunction with other attack techniques, such as distributed denial-of-service (DDoS) attacks.
  
  Tips & Tricks: 
  To protect against Slowloris attacks, it is important to ensure that your web server is configured correctly and that all security patches are up-to-date. Additionally, you should consider using a web application firewall (WAF) to detect and block malicious requests.
  
  Related Information: 
  Slowloris is part of the BC-CST Client/Server Technology component of SAP. It is important to understand how Slowloris works in order to properly secure your SAP system against this type of attack. Additionally, you should be aware of other types of denial-of-service attacks, such as DDoS attacks, and how they can be used to target your SAP system.