Wednesday, July 3, 2019

What constitutes a DDoS attack?

Image source: trimm.nl
A DDoS or distributed denial-of-service attack is one that disrupts the targeted server’s usual traffic, network, or service. It does this by overwhelming the target with a flood of internet traffic, often relying on multiple, compromised computer systems as sources, explains website security professional SiteLock.


Machines that can be compromised include PCs, smartphones, and tablets, plus any other resources connected to the network, such as IoT devices. Think of a DDoS attack as an elaborate traffic jam preventing you from getting to your destination. It works by gaining control of an online network of machines, infecting them with malware and turning each one into a bot, effectively creating what is known as a botnet.


The attacker who controls this botnet can send various instructions remotely, updating the commands as they want. As a result, the target network’s IP address get to overflow capacity, and a denial-of-service to normal traffic occurs. There can be more than one attack vector, and the attacker may even cycle through them to deal with any countermeasure taken by the target network.


Ultimately, a DDoS attack seeks to exhaust the resources of its target, says SiteLock. Web pages will have problems responding to HTTP requests, as servers often need to load multiple files to accommodate database queries, much less respond to a barrage of such requests.


SiteLock is a global leader in business website security solutions. Founded in 2008, it serves over 8 million customers worldwide. Visit this site for more on the company.