An Empirical Study of Slow Http Attackiln Web Server: APACHE VS NGINX VS LIGHTTPD VS IIS / Nadia Khairani Mohd Sanawi, Abdul Haziq Afiq Mohammad Khairi and Anwar Farhan Zolkeplay

Web server is the storage for web site files and to broadcast the files over the internet for anyone who try to visit the web site. The web server will store and transfer web site data upon the request of a client’s browser. However, as many as web server available, the potential of cyber attack to them is also increased (Suroto,2017). DDoS attack is one of a way to prevent legitimate user accessing the website. If the DDoS are still ongoing it will cause troublesome such as the bandwidth spike to an incredible amount that causes the decreasing of a system performance (Zebari et al.,2018). Thus, slow HTTP attack in web server need to be concern. The objective of this project is to analyze different types of Web Server on handling multiple Slow HTTP Attack. Another objective in this project is to evaluate the effect and performance or response time, CPU utilization and network traffic of the Web server before and during attack based on Apache, Nginx, Lighttpd and IIS. In this project we have measured the web server performances that include response time, CPU utilization and network traffic. To complete the requirement, two devices are going to be used to perform Slow HTTP attack thus make it as DDoS attack. According to the result, the best web server that can minimize the effect of slow http DDOS attack in windows 10 environment is Nginx Webserver.