Filter upstream, limit the load and degrade gracefully.
The threat
the attacker saturates the call entry (robocalls, call flooding, SIM farms, voice DDoS) to make the service unavailable or drown its protection mechanisms.
Blind spotWhy classic frameworks miss it
classic application DoS targets infrastructure; here the voice channel is the saturable resource, and each call costs more than a web request.
MitigationProposed approach
number reputation filtering, rate limiting, per-source and per-duration quotas, sized capacity, clean degradation under hostile load.
The proposed control
capacity and quotas that bound the call entry.
Expected evidence
the service holds under hostile load (saturation test) or degrades cleanly.
SourcesReferences and public research
MITRE ATLAS 2026.07AML.T0029 Denial of AI Service
Public researchPublic research sources: MITRE ATLAS 2026.07 (verified technique mapping), OWASP GenAI (model abuse categories), and the public risk-voicebot (aivansoul/risk-voicebot) template defining the 20 checkpoints. No client registry data: generic card, no rating, no verdict.