https://linuxeries.org/tags/threat-modeling/ Recent content in Threat-Modeling on ShieldedBytes Hugo en Fri, 13 Nov 2026 08:12:34 +0200 https://linuxeries.org/post/2026-11-13-using-attack-trees-to-prioritize-api-ratelimi/ Fri, 13 Nov 2026 08:12:34 +0200 https://linuxeries.org/post/2026-11-13-using-attack-trees-to-prioritize-api-ratelimi/ <h2 id="attacktreedriven-ratelimiting-after-a-ddos">Attack‑Tree‑Driven Rate‑Limiting After a DDoS</h2> <p>We just survived a 2026 DDoS that hammered our public REST gateway. A botnet slammed a handful of endpoints with insane request rates, chewing through CPU and memory until real users hit time‑outs. The fallout was a frantic review of our throttling logic. Attack trees turned out to be the perfect tool to decide <em>which</em> endpoints need the tightest controls and <em>how</em> to enforce them without turning our API into a brick wall.</p>