It helps to define the types of possible attacks, there are thee generally; 1. Accessing and exploiting system resources like file system, network stack etc. G

It helps to define the types of possible attacks, there are thee generally; 1. Accessing and exploiting system resources like file system, network stack etc. Generally this can be mitigated by providing a method to whitelist api calls. Jvm security manager has this capability. 2. Exhaust memory by abusing heap allocation. Some os have the capability to limit memory usage per process. Some language run times can like jvm maxheap flag. Note this is per process, not per user request/script. 3. Hog the cpu, starving other process/requests/scripts. Again there are os level abilities to limit cpu per process, again not for individual request/script. I don’t know of any language/runtime that covers these three areas, if you do, or if I missed anything, please share!