Denial of Service tests (DoS)
Providing services through the Internet and Web technologies represents for the company a substantial part of their business (e.g. banks, e-commerce) in these days. This fact is obvious for the attackers too, who – in the competitive struggle – are trying to harm their operators disabling the service. How are you ready for this?
Goal of the test
The purpose of the test is to verify the resistance against the attacks of services designed to denial of access to services operated by excessive operating load. The aim of the attack (and therefore the tests) can be a variety of services to the customer, usually web applications or email, or infrastructure components (routers, DNS).
Most often is for operators critical some of the web application that presents or conveys the main business of the company. Therefore, it is most often the web server services, respectively
path that leads to it (routers, firewall, line).
The test progress
Test can be done at your chosen time and prevent problems with the availability for regular visitors or customers. Tests are also usually made in the form of short probes, it is not necessary a global long-term outage of your services.
Packet flooding (TCP SYN flood, UDP flood)
HTTP(s) flooding (number of connection)
Congestion by specific requirements that require non-trivial processing on the server side
Creating an emergency scenario in the case of DoS attack and failure
Benefits for you
Information about loads that your infrastructure is ready
Identification of vulnerable components
The greatest benefit is achieved with the web application penetration test, which can detect vulnerabilities applicable to DoS attack.
If you are interested in more details please contact us.