Abstract: A DDoS attack mitigation process, comprising: receiving a request from a client device; computing a data access frequency for the client device, data access frequency being a number of requests received from the client device within a set period of time; comparing the data access frequency to a threshold value, wherein a DDoS attack is suspected if the data access frequency is higher than the threshold value; if a DDoS attack is not suspected, then the request being forwarded to the intended resource; else if a DDoS attack is suspected, then responding to the client user's device with a DDoS attack mitigation challenge webpage embedded with a user-interactive widget to the client user's device requiring the client device's user to drag a prompt icon along a movement path without interrupt for authentication.