A Study of Application Layer Slow-rate Denial of Service Attacks