本文导读

展开导读

文档首页/ 边缘安全 EdgeSec/ 最佳实践/ CC Attack Protection/ Preventing Bonus Hunting by Configuring Service Cookies and System IDs

Preventing Bonus Hunting by Configuring Service Cookies and System IDs

更新时间：2025-03-04 GMT+08:00

This topic introduces how to configure service cookies and system IDs to restrict malicious bonus hunting and downloads.

Scenario 1: To steal extra bonus (such as goods in promotions or downloads), a malicious actor may use the same account to send requests to a website by changing IP addresses or terminals.
Protective measures: Using Cookies (or User IDs) to Configure a Path-based CC Attack Protection Rule
Scenario 2: To steal extra bonus (such as goods in promotions or downloads), a malicious actor may use multiple accounts to send requests to a website through the same PC by frequently changing its IP address.
Protective measures: Using a System ID to Configure a Path-based CC Attack Protection Rule

Log in to the management console.
Click in the upper left corner of the page and choose Content Delivery & Edge Computing > CDN and Security.
In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
In the Policy column of the row containing the target domain name, click the number of enabled protection rules. On the page displayed, confirm that the status of CC attack protection is enabled () and click Customize Rule.

Figure 1 CC Attack Protection configuration area
In the upper left corner of the CC Attack Protection page, click Add Rule. Use service cookies to configure the CC attack rate limit mode based on paths. Enter the service cookie or user ID. For details, see Figure 2.

Figure 2 Configuring service cookies
Click Confirm.

Log in to the management console.
In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
In the Policy column of the row containing the target domain name, click the number of enabled protection rules. On the page displayed, confirm that the status of CC attack protection is enabled () and click Customize Rule.

Figure 3 CC Attack Protection configuration area
In the upper left corner of the CC Attack Protection page, click Add Rule. Configure a CC attack protection rule using system ID like HWSESID to limit traffic to the path. Figure 4 shows an example rule.

Figure 4 System ID
Click Confirm.

Parent topic: CC Attack Protection

提供反馈

提交成功！非常感谢您的反馈，我们会继续努力做到更好！

系统繁忙，请稍后重试

在使用文档中是否遇到以下问题

内容与产品页面不一致

内容不易理解

缺失示例代码

步骤不可操作

搜不到想要的内容

缺少最佳实践

意见反馈（选填）

0/500

请至少选择一项反馈信息并填写问题反馈

字符长度不能超过500

直接提交取消