The Slowloris attack is a type of application-layer attack that targets the web server by establishing

and maintaining many simultaneous HTTP connections to the target server. Unlike traditional

network-layer DoS/DDoS attacks such as UDP flood or SYN flood, Slowloris is designed to hold as

many connections to the target web server open for as long as possible. It does so by sending partial

requests, which are never completed, and periodically sending subsequent HTTP headers to keep the

connections open. This consumes the server's resources, leading to denial of service as legitimate

users cannot establish connections. The Slowloris attack is effective even against servers with a high

bandwidth because it targets the server's connection pool, not its network bandwidth.

Reference:Incident Handler (ECIH v3) courses and study guides particularly emphasize understanding

different types of attacks, including application-layer attacks like Slowloris, as part of the incident

handling and response process.