[Dailydave] Denial of Service via Algorithmic Complexity

[Tal Garfinkel]

There has been some work done on the issue that dave mentioned about
exploiting the complexity of certain program operations
for efficient denial of service by Scott Crosby and Dan Wallach from Rice.
They looked at how this type of attack could be
used against the Bro IDS, among other things... you can check out their
Usenix Security paper, example code, and pointers
to related work here.

http://www.cs.rice.edu/~scrosby/hash/

Cheers,
Tal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.immunitysec.com/pipermail/dailydave/attachments/20080423/83034ef5/attachment.htm