DoS/Brute Force [Not Directly IDP Related]

[Cantor, Scott]

On 8/22/17, 4:24 PM, "users on behalf of Joshua Brodie" <users-bounces at shibboleth.net on behalf of josbrodie at gmail.com> wrote:

> Assuming you don't have a big budget -- and no infrastructure defenses -- beyond bare bones firewall -- how would you protect
> the IdP from a DoS type attack...

I leave it to my network, but I thought I would note that there are basic sanity checks that are part of any web server that do involve a kind of DoS, such as limiting the body size of a POST, size of headers, etc. There are also lots of threats involving XML, and they've largely been dealt with over a gradual period (one big step forward being dumping Xerces in favor of Oracle's XML code that's actually being maintained).

I know that's not the kind of attacks you mean, but if this is about satisfying security risk assessments or such, it still counts.

-- Scott