What is a DDoS attack?

A DDoS attack (Distributed Denial of Service) is a type of cyber attack in which the attacker's goal is to overload a target server, service or network by generating illegitimate traffic from many different sources. By being overloaded, the target becomes unavailable - legitimate users cannot access it.

It is typical for a DDoS attack to:

  • Attackers use a network of infected computers and many different IP addresses to carry out the attack
  • The attackers are sending huge number of requests or data packets overloading the target
  • The result of a DDoS attack is limited availability of the destination, which can have extremely serious consequences for organisations that need to be available 24/7

The motivation for a DDoS attack can vary. The attacker may want to harm the target organization for either economic interest, political motives or blackmail.

It is of course possible to protect against DDoS attacks. There are various security measures, such as firewall, intrusion prevention system (IPS), services specializing in DDoS attacks etc. These tools help to identify and filter the attack.