Response
The response to business logic abuse can be quite challenging for two reasons. First, detecting business logic abuse is difficult. The perpetrators using the same functionality used by legitimate users and therefore, their traffic is likely intermingled with real traffic. This can make the identification of these types of exploits problematic.
Second, since the criminal is using a legitimate flow on a website or other application, disabling that flow would result in a very poor experience for the website’s users. Finding an approach where legitimate users can access the business flow while limiting access to the bad actor is an especially tricky endeavor.
Read more about this topic: Business Logic Abuse
Famous quotes containing the word response:
“I’ll never forget my father’s response when I told him I wanted to be a lawyer. He said, “If you do this, no man will ever want you.””
—Cassandra Dunn (b. c. 1931)
“It does me good to write a letter which is not a response to a demand, a gratuitous letter, so to speak, which has accumulated in me like the waters of a reservoir.”
—Henry Miller (1891–1980)
“Because humans are not alone in exhibiting such behavior—bees stockpile royal jelly, birds feather their nests, mice shred paper—it’s possible that a pregnant woman who scrubs her house from floor to ceiling [just before her baby is born] is responding to a biological imperative . . . . Of course there are those who believe that . . . the burst of energy that propels a pregnant woman to clean her house is a perfectly natural response to their mother’s impending visit.”
—Mary Arrigo (20th century)