SECAI Core · phase 7 of 15 · noun

Rate limiting

An approach that protects the attack from consuming all available bandwidth and impacting other servers and services on the network. It reduces the amount of throughput available to the server or service being attacked.

The Explain card

Plain English
Rate limiting is a defensive measure that caps the throughput reaching a server or service under attack, so the flood cannot consume all available bandwidth and knock over neighbouring systems on the network.
Example
During a volumetric attack on a company's AI inference API, the edge gateway throttles traffic to that endpoint. The chatbot slows down, but the authentication service, billing system and other APIs sharing the same network keep running normally.
Why it matters
AI endpoints are expensive per request and attractive to flood. Containing the blast radius means one hammered model does not take the whole platform down with it.
Hook
A storm drain, not a dam: it keeps the overflow from flooding the street.

Word knowledge

How the word is built, where it came from, and what it sits beside in memory.

In a sentence

When a volumetric flood hits the inference virtual IP, the edge load balancer applies rate limiting on TCP port 443 and sheds packets before they reach the GPU rack.

Why these words
  • rate Latin ratus, fixed, calculated, via Old French rate names the quantity being bounded, so the cap is counted in events per unit time
  • limiting Latin limes, limitis, boundary, plus English -ing is the gerund head, the act of bounding, so the phrase names a practice rather than a single ceiling
Where it came from
Origin
English computing collocation from Latin ratus, fixed, calculated (via Old French rate), and Latin limes, limitis, boundary, plus English -ing
Entered the language
1990s
What changed
Rate entered English in the 1400s as a calculated share, then came to mean a speed. Limit, from a Roman frontier, became any bound and then the act of bounding. Chemists of the early 1900s joined the pair as the hyphenated adjective in a rate-limiting step. Packet networks of the 1980s and 1990s reused the open compound for a traffic cap, and API gateways kept it as the control that answers excess calls with HTTP 429.
How it is spelled
Pattern
a plus silent e spells /eɪ/ in rate, as in late and date
Pattern
silent e drops before -ing: rate becomes rating, as make becomes making
Pattern
unstressed final -it does not double t before -ing, unlike commit and committing
Breaks the pattern
the noun phrase stays two words; a hyphen appears in the adjective rate-limiting and when the pair modifies another noun
Breaks the pattern
rate as a noun and a verb keeps one spelling

Spelled like

  • late
  • date
  • rating
  • visiting
  • editing
Broken into chunks
  • rat
    • ratio
    • ration
    • ratify
  • lim
    • unlimited
    • delimit
    • limitation
  • ing
    • training
    • learning
    • testing
What it sits beside

Same subject

Same shape

Runtime caps

Rate compounds

Limit compounds

Where it sits in the deck

Phase 7: AI-Specific Runtime Controls: Guardrails, Limits, and Enforcement

Responsible AI principles must be enforced mechanically — learn the runtime controls that constrain model inputs, outputs, and resource consumption.

Neighbours in this phase