title: JBoss AS 7.1.1 application detect "Slow HTTP Denial of Service Attack"
body: <p>I have a Java Web project deployed under Jboss as 7.1.1, After I checked the project with Acunetix Web Vulnerability Scanner, it alerted that "slow HTTP Denial of Service Attack", this is the screenshot of the problem.</p>
  
  <p><a href="http://i.stack.imgur.com/OHjip.png" rel="nofollow">enter image description here</a></p>
  
  <p>I know that about tomcat or jboss4 modify server.xml can work, the default connectionTimeout is 20000, after set it as 8000 the problem solved.</p>
  
  <pre><code>&lt;Connector port="8080" address="0.0.0.0"    
    maxThreads="250" maxHttpHeaderSize="8192"
    emptySessionPath="true" protocol="HTTP/1.1"
    enableLookups="false" redirectPort="8443" acceptCount="100"
    connectionTimeout="8000" disableUploadTimeout="true" /&gt;
  </code></pre>
  
  <p>So in order to decrease the connectionTImeout of Jboss7, I modified the standalone.xml like this </p>
  
  <pre><code>&lt;system-properties&gt;
      &lt;property name="org.apache.coyote.http11.DEFAULT_CONNECTION_TIMEOUT" value="2000"/&gt;
      &lt;property name="org.apache.coyote.http11.DEFAULT_KEEP_ALIVE_TIMEOUT" value="1000"/&gt;
  &lt;/system-properties&gt;
  </code></pre>
  
  <p>but it not work, the problem "slow HTTP Denial of Service Attack" is still exist. <br>
  Thanks &amp; Regards.<br>
  Forest</p>