After a recent upgrade, users of Trend Spot encountered slow website load times. Analysis revealed attackers flooding the application with fake search requests, causing an application-layer DoS attack. How should Trend Spot primarily respond?
A.
Regularly clear the server cache.
B.
Shift to a more robust hosting provider.
C.
Introduce rate limiting on search request functionality.
D.
Implement IP address-based blocking for suspicious traffic.
This incident represents an application-layer DoS attack, which targets specific functions rather than bandwidth. ECIH emphasizes function-level protection in such scenarios.
Option C is correct because rate limiting restricts abusive request frequency while allowing legitimate usage. It directly addresses the exploited feature without disrupting service availability.
Option D may block legitimate users behind shared IPs. Options A and B do not mitigate the attack vector.
Rate limiting aligns with ECIH guidance for preserving availability during Layer 7 attacks.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit