How to identify and prevent "Slow Post" Attacks...

[Surabhi_gupta]

I heard about new kind of DoS attack that is slow post attack. I started investigating and couldn't find anything that explains how Apigee can help here.

Anyone solution/recommendations to prevent these in Apigee?

[sidd-harth]

Generally speaking, set an absolute connection timeout.

IMO one way of Slow Post Attacks can be done by using CRLF tags(injection) in headers. So to avoid it a simple way is to is to sanitize the CRLF characters before passing into the header or to encode the HTTP header data which will prevent the CRLF sequences entering the header.

Within Apigee, use the Javascript/Assign Message policy to overwrite the header values.

Have a look at this post,

https://community.apigee.com/articles/19487/api-vulnerabilites-and-their-mitigation-in-apigee.html

[Surabhi_gupta]

Hi @Siddharth Barahalikar,

Thank you for your response and the link. it's really good and helpful. I'll review and see if there are more questions.

[Surabhi_gupta]

How can we set absolute connection timeout in Apigee proxy end point?