Method and apparatus to facilitate individual and global lockouts to network applications

A computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method to facilitate locking an adversary out of a network application, the method comprising:

• receiving at a server a request, including an authentication credential, to access the network application, wherein the authentication credential includes a user identifier and a specific network address of a user device;
• if the user identifier has been locked out from the specific network address,
• denying access to the network application;
• and
• if the authentication credential is valid, allowing access to the network application, otherwise,
• logging a failed attempt in the audit log,
• imposing a lockout for the user identifier from only the specific network address after a threshold number of failed attempts from the specific network address,
• if a threshold number of network addresses are locked out for the user identifier, imposing a global lockout for the user identifier, and
• denying access to the network application.