New CPDoS Web Cache Poisoning Attacks Impact Sites Using Popular CDNs

guest · Oct 22, 2019

New CPDoS Web Cache Poisoning Attacks Impact Sites Using Popular CDNs
October 22, 2019
https://www.bleepingcomputer.com/ne...ning-attacks-impact-sites-using-popular-cdns/

Details have emerged about a new class of web cache poisoning attacks that could be used to deny users access to resources delivered through a content delivery network (CDN).

Named Cache-Poisoned Denial of Service (CPDoS), the new method has several variations and works by sending an HTTP request with a malformed header.
DoS via cache servers
CDNs have the property of reducing the traffic footprint on origin servers using their services by caching resources that are requested frequently by clients. A direct effect of this is increased performance.
Issue present on multiple CDNs
From the tests carried out by the three academics, it appears that Amazon's CloudFront CDN is the most vulnerable to CPDoS threats.

Out of the 25 traffic servers and web frameworks tested by the researchers, the HTTP implementation on only three of them is immune to the CPDoS attacks: Apache TS, Google Cloud Storage, and Squid.
Click to expand...

Paper: "Your Cache Has Fallen: Cache-Poisoned Denial-of-Service Attack"
(PDF - 4.99 MB): https://cpdos.org/paper/Your_Cache_Has_Fallen__Cache_Poisoned_Denial_of_Service_Attack__Preprint_.pdf

Log in or Sign up

New CPDoS Web Cache Poisoning Attacks Impact Sites Using Popular CDNs

guest Guest

Log in or Sign up

New CPDoS Web Cache Poisoning Attacks Impact Sites Using Popular CDNs

guest Guest

Useful Searches