What 'Denial Of Service Attack (DoS)'

A Denial Of Service Attack (DoS) is an intentional cyberattack carried out on networks, websites and online resources to restrict access to its legitimate users. Denial of Service (DoS) attacks is highly notable events that may last from a few hours to many months. A type of DoS attack that is prevalent on the web is called the Distributed Denial of Service (DDoS) attack.

BREAKING DOWN 'Denial Of Service Attack (DoS)'

DoS attacks are on the rise because as businesses and consumers use more digital platforms in communicating and transacting with each other; these cyberattacks target digital intellectual property and infrastructures. Cyberattacks are typically launched to steal personally identifiable information (PII), causing considerable damages to the businesses’ financial pockets and reputation. Data breaches can target a specific company or a host of companies at the same time. A company with high-security protocols in place may be attacked through a member of its supply chain with inadequate security measures. When multiple companies have been selected for an attack, the perpetrators can use a Denial of Service Attack (DoS) approach.

In a DoS attack, the cyberattackers typically use one internet connection and one device to send rapid and continuous requests to a target server to overload the server’s bandwidth. DoS attackers exploit a software vulnerability in the system and proceed to exhaust the RAM or CPU of the server. The damage in loss of service done by a DoS attack can be fixed in a short time by implementing a firewall with allowing and deny rules. Since a DoS attack only has one IP address, the IP address can be easily fished out and denied further access using a firewall. However, there is a type of DoS attack that is not so easy to detect – Distributed Denial of Service (DDoS) attack.

Distributed Denial of Service Attack

A Distributed Denial of Service (DDoS) attack uses multiple infected devices and connections spread around the world as a botnet. A botnet is a network of personal devices which have been compromised by cybercriminals without the knowledge of the owners of the devices. The hackers infect the computers with malicious software to gain control of the system to send spam and fake requests to other devices and servers. A target server that falls victim to a DDoS attack will experience an overload due to the hundreds or thousands of phony traffic that comes in. Because the server is attacked from multiple sources, detecting all the addresses from these sources may prove difficult. Also separating legitimate traffic from the fake traffic may also be impossible to do, hence, another reason why it is hard for a server to withstand a DDoS attack.

Unlike most cyberattacks that are initiated to steal sensitive information, initial DDoS attacks are launched to make websites inaccessible to their users. However, some DDoS attacks are used as a façade for other malicious acts. When servers have been successfully knocked down, the culprits may go behind the scenes to dismantle the websites’ firewalls or weaken their security codes for future attack plans.

A DDoS attack can also be used as a digital supply chain attack. If the cyberattackers cannot penetrate the security systems of their multiple target websites, they can find a weak link that is connected to all the targets and attack the link instead. When the link is compromised, the primary targets would automatically be indirectly affected as well.

Distributed Denial of Service Attack Example

In October 2016, a DDoS attack was carried out on a domain name service (DNS) provider, Dyn. Think of a DNS as the internet’s directory that routes your request or traffic to the intended webpage. A company like Dyn hosts and manages the domain name of select companies in this directory on its server. When Dyn’s server is compromised, this also affects the websites of the companies that it hosts. The 2016 attack on Dyn, flooded its servers with an overwhelming amount of internet traffic, thereby creating a massive web outage and shutting down over 80 websites including major sites like Twitter, Amazon, Spotify, Airbnb, PayPal, and Netflix.

Some of the traffic was detected from a botnet created with malicious software known as Mirai that seemed to have affected over 500, 000 devices connected to the internet. Unlike other botnets that capture private computers, this particular botnet gained control over the easily accessible Internet of Things (IoT) devices such as DVRs, printers, and cameras. These weakly secured devices were then used to make a DDoS attack by sending an insurmountable number of requests to Dyn’s server.

Cyber vandals keep coming up with new ways to commit cybercrime either for fun or profit. It is imperative that every device that has access to the internet have security protocols in place to restrict access.

RELATED TERMS
  1. Cloud Security

    Cloud security is the protection of data stored online from theft, ...
  2. Mobile Banking

    Mobile banking is the act of making financial transactions on ...
  3. Man-In-The-Middle Fraud

    Man-In-The-Middle Fraud is a crime where an unauthorized third ...
  4. Spoofing

    Spoofing is a type of deception where an intruder attempts to ...
  5. Data Breach

    A data breach is an unauthorized access and retrieval of sensitive ...
  6. Bank Wire

    A bank wire is an electronic message system, which allows major ...
Related Articles
  1. Insights

    Top Cyber Security Risks for Financial Advisors

    Cyber crime is on the rise. Here's what advisory firms, big and small, need to be aware of and how to prepare.
  2. Investing

    Android Phones Vulnerable to Wi-Fi Attacks: Report

    Cybersecurity experts say a new kind of attack lets hackers read Wi-Fi traffic, inject malware.
  3. Investing

    Microsoft Brand 'Largely Unscathed' By WannaCry Attack: Report

    The WannaCry cyberattack that swept across the globe earlier in May, exploited a bug in unpatched Microsoft operating systems and it's time to assess whether it caused a dent in the company's ...
  4. Investing

    Microsoft Turns to AI to Fight Cyberattacks

    Microsoft is turning to artificial intelligence in the wake of the WannaCry ransomware attacks.
  5. Tech

    Common Cybersecurity Threats and How to Protect Yourself

    With all of the ways hackers can steal your identity and personal information, it's important to protect yourself.
  6. Investing

    WannaCry Hackers Threaten Another Microsoft Data Dump

    The hacking group behind the WannaCry attack are threatening another data dump.
  7. Investing

    Report: Microsoft Charged for 'WannaCry' Patch

    Microsoft opted to charge users for a patch that would have slowed the global ransomware attack.
  8. Investing

    Internet of Things Poses Massive Cyberthreat (SYMC, PANW)

    Legacy IT firms and cloud-based cyber startups alike rush to offer organizations worldwide a secure connection between billions of new connected devices.
  9. Insights

    6 Ways To Protect Yourself Against Cybercrime

    Cybercrime is becoming more and more serious in the U.S. Here are some ways you can protect your finances from cybercriminals.
  10. Investing

    13 Ways to Invest in Cybersecurity

    Rarely a week goes by without a new media story about data breaches, hacking schemes or cyber attacks impacting individuals, companies and even governments. Four top investment experts who contribute ...
RELATED FAQS
  1. How do Internet companies profit if they give away their services for free?

    Learn how companies in the Internet sector make a profit when service, content and user applications are offered at no cost ... Read Answer >>
  2. Who are GoDaddy's (GDDY) main competitors?

    GoDaddy, the biggest domain registrar has enjoyed great success over the years but its market dominance is now under threat ... Read Answer >>
Trading Center