An attack where AI agents keep calling services until they run out of resources.
It is like one kid taking every ticket at the deli counter. Each ticket is valid. Soon, nobody else can get served.
Attackers can flood open APIs with normal-looking requests. Rate limits, access rules, and alerts help stop it.
Agent
An Agent can send many service requests on its own.
API
The attack uses valid API requests to drain a service.
Agent Concurrency
Parallel work makes the flood grow much faster.
Agent Security
Rate limits and access rules help lower the risk.