Traffic manager for distributed computing environments

A computer-implemented method for taking one or more remedial actions in response to one or more service attacks, the method comprising:

• executing, at a computer, steps comprising:
• receiving a SOAP message;
• determining at least one of:
• (a) a message type for the SOAP message, (b) a sender for the SOAP message, and (c) a recipient for the SOAP message;
• determining whether at least one rule is associated with at least one of the message type (a), the sender (b), and the recipient (c);
• selecting at least one portion of the data which has been collected for at least one of the message type (a), the sender (b), and the recipient (c);
• evaluating the at least one rule using the selected at least one portion of data;
• determining whether the SOAP message constitutes a service attack based on the evaluating of the at least one rule;
• and
• taking remedial action responsive to determining that the SOAP message constitutes a service attack, wherein the remedial action comprises notifying an administrator.

A traffic manager for taking one or more remedial actions in response to one or more service attacks, the traffic manager comprising:

• a central processing unit and a computer readable storage medium, the central processing unit configured to:
• receive a SOAP message;
• determine whether at least one rule is associated with the SOAP message;
• collect data that may be required to evaluate the at least one rule;
• evaluate the at least one rule at least partially based on the collected data;
• determine whether the SOAP message constitutes a service attack based on the evaluating of the at least one rule;
• and
• take remedial action responsive to determining that the SOAP message constitutes a service attack, wherein the remedial action comprises notifying an administrator.

A computer-readable storage medium storing program instructions for taking one or more remedial actions in response to one or more service attacks, the program instructions performing steps of:

• receiving a SOAP message;
• determining whether at least one rule is associated with the SOAP message;
• collecting data that may be required to evaluate the at least one rule;
• evaluating the at least one rule at least partially based on the collected data;
• determining whether the SOAP message constitutes a service attack based on the evaluating of the at least one rule;
• and
• taking remedial action responsive to determining that the SOAP message constitutes a service attack, wherein the remedial action comprises notifying an administrator.