如何处理大型有效载荷攻击？

Question

I have soap based large payload (bytes) data on webservice call. How do i ensure that application will be proof from:

• Malicious client generating fake requests with large payload keeping server busy handling fake requests?
• How to reject extremely large payload before encountering OME to protect server crash?

Answer 1

Unless you authenticate your clients either via SSL authentication or at least via login it is extremely difficult to distinguish valid and fake requests that could cause DoS. In the latter case hire a professional consultant. My 2 cents on this...