Typically when my Guards authenticate or authorize, they have some means of counting failures for a given principal, and for a given origin IP or range. When the failure count exceeds a safe level, the Guard locks out that account or origin, returning a fast permission-denied for a period of time. If the failures continue after that period elapses, a new, longer lock out period is begun, etc. This makes it annoying to brute-force attack the authentication mechanism from outside. An excess of lockouts triggers an alarm to a sysadmin for investigation.
On Fri, May 16, 2008 at 6:47 PM, Surjendu <[EMAIL PROTECTED]> wrote: > Thanks Rob..Can u plz elaborate what do u mean by > backed off timeouts for authentication failures. What else > do u suggest for application level prevention for DOS attacks? > >
