Section
9.1.1
Sub Level
General
Minimize the amount of resources an application can allocate to a single user.
Coldfusion

Set Server Settings: Timeout Requests after X seconds. This can be set in the Cold Fusion Server Administrator to terminate long running requests and avoid DoS attacks. If a valid request needs to be allowed to run longer, the individual pages can use the <cfsetting> tag with a RequestTimeoutattribute configured appropriately.

Natural Webagent
Pay special attention to submitting batch jobs from the web.