Typical defences are limits (body size, rate, concurrency) and timeouts, so no single client can hold a resource for free.
Denial of service
An attack or accident that makes a service unavailable by exhausting a resource such as memory, connections or CPU.