How other people can kill your web server: no fun and little profit

It appears that Apache, nginx and Perlbal are all fairly trivial for a single client to take down or make inaccessible. Suggestions?