Protect systems with token buckets, leaky buckets, quotas, concurrency limits, admission control, and fair-use policies.