If attackers use the functions of a web application or a web service in an automated way, they can perform numerous processes in a short time. Using a repeated login process, an attacker can, for example, attempt to determine valid combinations of user names and passwords (brute force) or generate lists of valid user names (enumeration) if the web application or service returns information about existing users. In addition, calling up resource-intensive functions repeatedly (e.g. complex database queries) can be misused for denial-of-service attacks at the application level.