OWASPASVS 5.0 requirement

ASVS-V17.3.1 The signaling server is able to continue processing legitimate incoming signaling messages during a flood attack.

L2 Published 2025 Official page ↗
Standard
OWASP ASVS 5.0
Chapter
V17 WebRTC
Section
V17.3 Signaling
Level
L2 (requirement applies from this verification level up)

Requirement

Verify that the signaling server is able to continue processing legitimate incoming signaling messages during a flood attack. This should be achieved by implementing rate limiting at the signaling level.