DoWTS – Denial-of-Wallet Test Simulator: Synthetic data generation for preemptive defence

Abstract The intentional targeting of components in a cloud based application, order to artificially inflate usage bills, is an issue application owners have faced for many years. This has occurred under guises, such as: Economic Denial Sustainability (EDoS), Click Fraud and even secondary effects Service (DoS) attacks. With the advent commercial offerings serverless computing circa 2015, variant EDoS attack emerged, termed, Denial-of-Wallet (DoW). We describe our development simulation tool as safe means research these attacks well generate datasets training future mitigation systems combat DoW. believe that DoW may become increasingly prevalent applications further utilise services on pay-per-invocation cost model. Given damage caused purely financial, not be disclosed users are directly effected. As such, we simulator specific testing security measures against this niche will able provide previously unavailable data insights community. developed prototype can emulate multiple months worth API calls matter hours ease generation. Our aspiration work system starting point form attack. present Test Simulator (DoWTS) - allows theorised via synthetic also expand upon prior analysis lack safety