Java框架如何处理网络攻击的事件响应？

@Controller
public class ErrorController {

    @ExceptionHandler(value = { RuntimeException.class })
    public ResponseEntity<?> handleError(RuntimeException ex) {
        return new ResponseEntity<>(ex.getMessage(), HttpStatus.BAD_REQUEST);
    }
}

public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
                .authorizeRequests()
                .antMatchers("/admin/**").hasRole("ADMIN")
                .anyRequest().permitAll()
                .and()
                .formLogin()
                .and()
                .httpBasic();
    }
}

<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-security</artifactId>
</dependency>

<dependency>
    <groupId>com.owasp</groupId>
    <artifactId>owasp-core-ruleset</artifactId>
    <version>4.1.0</version>
</dependency>

@Slf4j
public class HomeController {

    @GetMapping("/")
    public String home() {
        log.info("Received request for home page");
        return "home";
    }
}

<dependency>
    <groupId>io.micrometer</groupId>
    <artifactId>micrometer-registry-prometheus</artifactId>
</dependency>