Apache attacked by a "slow loris"

A simple solution would be this: if you exhausted all threads/sockets/whatever resource, and a new request comes in, drop an old thread/socket/resource. Of course, there should be some tweaks to make things fair for slow but legitimate clients.