a method and system for managing one or more web requests provided to a web application from a client computer . an application is responsive to a web request to generate verification data . the application sends a reply to the client to calculate a stamp as a function of the generated verification data . the application is responsive to an additional request from the client including the calculated stamp to determine if it corresponds to the generated verification data . if the calculated stamp corresponds to the generated verification data , the additional web request is submitted to the web application for processing . a web server subject to a dos attack will be able to distinguish between genuine users and malicious users and over a period of time be able to restore service to the former and deny to the latter .