摘要:
http request headers are typically parsed by the web server as a hash table. If the technology in use has a deterministic hashing scheme, it's vulnerable to hash collision based DOS attack.No matter how we choose our hash function, it's always possible to devise a set of keys that will hash 阅读全文