Interesting presentation at OWASP AppSec DC 2010 about HTTP POST DDOS attacks. It’s amazing what you can achieve at the OSI’s application layer.