Patent ID: 7376732

Claim:
A method for processing commands of at least one user, comprising: intercepting the commands directed for a web server to protect the server from malicious attack; establishing a pre-designated set of commands that are known to be valid commands for the web server; comparing the intercepted commands to the pre-designated set of commands that are known to be valid commands for the web server, the comparing always being made without reference to identity of said at least one user for each and every one of the intercepted commands; dropping ones of the intercepted commands to eliminate malicious commands when the comparison of the ones of the intercepted commands does not generate a match to the pre-designated set of commands, thereby not passing malicious intercepted commands to the web server; monitoring resources of the web server; and throttling back resource usage of the web server by the intercepted commands excluding the malicious intercepted commands when the monitored resources are being used above a threshold level.