Measuring robustness of web services to denial of service attacks

摘要

The method includes: selecting a web service method for testing; selecting a request pattern for a test as the request pattern with the slowest response using the method from a series of request patterns including irregular requests having a payload aimed at destabilizing the web service; applying a test to the method, wherein the test uses the selected request pattern applied at an increasing frequency to the method; monitoring the response time of the request pattern by the method; determining the frequency of the applied request pattern when a threshold maximum time for response of the method to the request pattern is reached or when the method fails; and determining a metric for the method based on the frequency of the applied request pattern required to reach the threshold.