this looks a good post regarding test cookie:
http://umumble.com/blogs/Infosecurity/538/
litespeed's built-in anti-ddos has been approved to be effective to mitigate DDOS in many scenarios, but of course, it's not effective in all cases.
in fact, litespeed already has javascript based...