Business Logic Abuse - Response

Response

The response to business logic abuse can be quite challenging for two reasons. First, detecting business logic abuse is difficult. The perpetrators using the same functionality used by legitimate users and therefore, their traffic is likely intermingled with real traffic. This can make the identification of these types of exploits problematic.

Second, since the criminal is using a legitimate flow on a website or other application, disabling that flow would result in a very poor experience for the website’s users. Finding an approach where legitimate users can access the business flow while limiting access to the bad actor is an especially tricky endeavor.

Read more about this topic:  Business Logic Abuse

Famous quotes containing the word response:

    “The reason can give nothing at all Like the response to desire.”
    —Wallace Stevens (1879–1955)

    “Women had to deal with the men’s response when the women wanted more time “out” of the home; men now must deal with the women’s response as men want more time “in.””
    —Kyle D. Pruett (20th century)

    “The truth is that literature, particularly fiction, is not the pure medium we sometimes assume it to be. Response to it is affected by things other than its own intrinsic quality; by a curiosity or lack of it about the people it deals with, their outlook, their way of life.”
    —Vance Palmer (1885–1959)