Threat detection in a data processing system

Abstract

An illustrative embodiment provides a method for resolving a detected threat. The method receives a request from a requester to form a received request, extracts statistics associated with the received request to form extracted statistics, performs rules validation for the received request using the extracted statistics, and determines whether the request is a threat. Responsive to a determination that the request is a threat, escalate the requester using escalation increments, wherein the using escalation increments further comprises increasing user identity and validation requirements through one of percolate to a next user level or direct entry to a user level.

Description

technical field [0001] The present invention generally relates to threat detection in data processing systems. Background technique [0002] Web applications can be subject to misuse and attacks, intentional or unintentional. Application-layer attacks such as denial of service (DoS), brute force, or exploiting unbounded conditions affect enterprises by limiting the availability and integrity of applications. Identifying problems and deploying solutions can be time-consuming. While the problem exists, the application continues to be unavailable, often resulting in lost revenue. Instead, restricting access to the application is ineffective, as attacking agents can easily change locations, and any barrier placed at the network layer can have a dramatic impact on the application's effective user community. [0003] Typical solutions target the network layer when suspicious activity occurs. However, as mentioned above, application layer attacks are often unintentional. Frequ...

AI Technical Summary

Problems solved by technology

However, as mentioned above, application layer attacks are often unintentional

Frequently, application layer attacks are caused by

Images