get fuzzy
These problems seem to be about uncontrolled resource allocation for particular (malicious) edge-case patterns of network data.
But shouldn't good edge-case tests pick them up? A good test must include worst case. It seems like tests are only ever about the headlines: bandwidth and reliability with 'normal' data.
Somebody gotta crank up the fuzz.