Everything About ___
Live briefing

Everything about ReDoS

Regular expression denial-of-service attack

A regular expression denial of service (ReDoS) is an algorithmic complexity attack that produces a denial-of-service by providing a regular expression (regex) and/or an input that takes a long time to evaluate. The attack exploits the fact that many regular expression implementations have super-linear worst-case complexity; on certain regex-input pairs, the time taken can grow polynomially or exponentially in relation to the input size. An attacker can thus cause a program to spend substantial time by providing a specially crafted regular expression and/or input. The program will then slow down or become unresponsive. Wikipedia →

🧭 Start here: a 6-step reading path

  1. Read the overview: ReDoSA 5-minute orientation
  2. Skim a recent paper: Aortic root redos revisited: New kids on the block mean more optionsInfluential work since 2022
  3. Pick up a classic book: Rozália Vörös et Ferenc RedoThe most-reprinted book on the subject
  4. Read the landmark paper: Regorafenib dose-optimisation in patients with refractory metastatic colorectal cancer (ReDOS): a randomised, multicentre, open-label, phase 2 studyCited 264 times
  5. Go sideways: RE2 (software)A closely related topic
  6. Go sideways: Regular expressionA closely related topic

📖 Definitions

Noun plural of redo

🗂️ The subject at a glance

  1. Description
  2. Examples
  3. Mitigation

🏆 Landmark papers (most cited)

🆕 Influential since 2022

📚 Books worth reading

Ranked by number of editions on Open Library, a rough measure of how lasting a book is.

🔗 Related topics