🎁 New User? Get 20% off your first purchase with code NEWUSER20 · ⚡ Instant download · 🔒 Secure checkout Register Now →
Menu

Categories

Security Beginner

What is DDoS (Distributed Denial of Service)?

An attack that floods a target server or network with traffic from multiple sources to overwhelm it and deny service to legitimate users.

DDoS attacks use thousands of compromised devices (botnets) to generate massive traffic volumes. Types include volumetric attacks (flood bandwidth), protocol attacks (exploit protocol weaknesses), and application layer attacks (target specific services).

Mitigation includes CDN/DDoS protection services (Cloudflare, AWS Shield), rate limiting, geo-blocking, traffic analysis, and over-provisioning. DDoS attacks are common and can target any internet-facing service. Protection should be part of every production architecture.

Related Terms

Webhook Signature Verification
A security mechanism that verifies webhook payloads are authentic and unmodified using cryptographic signatures.
Input Validation
The process of verifying that user-supplied data meets expected formats, types, and ranges before processing it.
Man-in-the-Middle Attack
An attack where the attacker secretly intercepts and potentially alters communication between two parties who believe they are communicating directly.
Certificate Pinning
A security technique that associates a host with its expected TLS certificate or public key, preventing man-in-the-middle attacks with fraudulent certificates.
Principle of Least Privilege
A security principle where users and programs receive only the minimum access rights needed to perform their specific tasks.
PKI (Public Key Infrastructure)
A framework of policies, hardware, and software for creating, managing, distributing, and revoking digital certificates.
 View All Security Terms →