Inference Resource Exhaustion Attack

When an attacker occupies computing resources continuously using a small number of extremely complex requests; due to unmitigated control gaps, the organization's traffic protection uses request count as its threshold and is never triggered, yet the service can no longer respond normally due to resource exhaustion, triggering compliance exposure and operational reputational costs.