Already implemented generally, any protocol violation is a channel drop. All channels have configurable (on a per service basis) lifetime limits and inactivity limits. So DoS protection is simply limiting how much resource consumption is allowed per channel per second.