A non-transitory computer-readable medium includes instructions for receiving a message associated with a session with a user device; determining that a quantity of tokens, to be used to process the message, is less than another quantity of tokens stored in a memory; determining that a session time is less than a threshold based on the determination that the quantity of tokens is less than the other quantity of tokens; determining that a violation has occurred when a time interval is greater than an interval threshold based on the determination that the session time is less than the threshold, where the time interval is from a prior time when another message, associated with the session, was received to a time that the message was received, and where the determining includes incrementing a quantity of violations associated with the session; outputting the message when the quantity of violations is not greater than a violation threshold; and dropping the message when the quantity of violations is greater than the violation threshold.