) You are concerned about the possibility of DoS attacks against your web server program. You have
developed a new module for your web server that you feel will prevent DoS attacks by slowing them
down. Your proposal is as follows: every incoming HTTP request is put into a queue, with a timestamp
and a “delayed” bit marked as false. When it is ready to serve a request, the web server takes the first
request in the queue. If the “delayed” bit is false and there are no other requests from the same IP
address in the queue, it serves the request immediately. If the “delayed” bit is false and there is at least
one other request from the same IP address in the queue, the “delayed” bit is set to true and the
request is re-inserted at the end of the queue. If the delayed bit is set to “true,” then the request is
served if the current time is at least 1 second greater than the requested timestamp, otherwise the
request is sent to the end of the queue again. Your idea is that this will allow the site to deal with
requests from legitimate users in preference to DoS attack requests.
a) Will this scheme work to prevent a DoS attack from making your web server unusable by normal
users? Give a detailed explanation.