Description: A DDoS (Distributed Denial of Service) attack is a malicious attempt to disrupt the normal functioning of a targeted server, service, or network. This type of attack is carried out by overwhelming the system with a massive volume of traffic, which can come from multiple sources, such as a network of compromised devices (botnets). Attackers use various techniques to generate this traffic, such as sending fake data packets or exploiting vulnerabilities in web applications. The main characteristic of a DDoS attack is its ability to overwhelm system resources, resulting in the server’s inability to handle legitimate requests. This can lead to service disruption, revenue loss, and damage to the reputation of the affected organization. The relevance of DDoS attacks has grown in the digital age, where the availability of online services is crucial for businesses and users. Defending against these attacks involves implementing robust security measures, such as traffic filtering and utilizing specialized mitigation services.
History: DDoS attacks began to gain notoriety in the 1990s, with the first documented attack occurring in 1996 against the website of an Internet service provider. As technology advanced, so did attack techniques, with the emergence of botnets in the 2000s, allowing attackers to launch more powerful and harder-to-trace attacks. Significant events include the DDoS attack on Dyn in 2016, which affected major platforms like Twitter and Netflix, and the attack on GitHub in 2018, which reached traffic of 1.35 Tbps, marking a milestone in the magnitude of these attacks.
Uses: DDoS attacks are primarily used by cybercriminals to extort companies, disrupt services of competitors, or as part of online protests. They can also be used as a distraction while other malicious activities, such as data theft, are carried out. In the field of cybersecurity, DDoS attacks are studied to improve defenses and resilience of critical infrastructures.
Examples: A notable example of a DDoS attack was the attack on DNS provider Dyn in October 2016, which disrupted access to several popular services like Twitter, Netflix, and Reddit. Another significant case was the attack on GitHub in 2018, which reached traffic of 1.35 Tbps, becoming one of the largest DDoS attacks recorded to date.