Does Cerber protect against ‘Automated massive requests’?
-
Hi all,
I’m undertaking a security review for a site which currently uses WP Cerber and in the Securing Forms part of the review, the requirement is to ‘Protect from automated massive requests’. My site has large forms to nominate but visitors need to be registered and signed in to reach them, so I guess that’s protection in itself. The only form that is publically accessible is the register form. Does Cerber have any kind of cabability to protect against this?
The explanation given for this requirement is as follows:
———
The web application should be protected against massive numbers of requests. This protection should be put in place in addition of what may be in place at network level. This rule should be applied for Internet and intranet applications, whether the form is authenticated or not. The protection should be put in place at application level, for each identified business risks related to the sending of large amount of requests by attackers using automated tools (for instance, when dealing with registration, booking, purchase, etc.) For instance, protection can be based on checking if the number of purchases made in an hour by a user account is higher than a maximum threshold.
———
Many thanks for any help
Kevin
- The topic ‘Does Cerber protect against ‘Automated massive requests’?’ is closed to new replies.
