Denial of Service Security Risks

Overview

No one likes to be denied something. Just ask my kids. Much of our defense

against DoS attacks will focus on keeping our public facing views and APIs

effecient, and to test for worst case scenarios like someone asking for

pagination with 1,000,000 items per page, or a very complex filter set.

Make sure you know what will happen to your code if someone asks for a huge

chunk of data or hits it over and over again. It should fail gracefully rather

than continue consuming resources. That said, some mitigation of this can happen

at the infrastructure level.