DDoS attack (Distributed Denial of Service)

What is DDoS attack (Distributed Denial of Service)?

A DDoS attack is a type of cyberattack in which attackers overwhelm a target server, website, or online service with a massive number of requests from a large number of devices at the same time. These devices are often infected computers or servers that the attacker controls without their owners’ knowledge, known as a botnet. The goal of a DDoS attack is not data theft, but preventing normal users from accessing the service. The server or network cannot process such a volume of requests, which leads to slowdown or a complete outage. In practice, DDoS attacks are a common tool of pressure, extortion, or competitive conflict.

Why It Matters

DDoS attacks are an important security topic because they can deprive a company of service availability even without compromising the systems themselves. An outage of a website, e-shop, or application means immediate loss of revenue, customer dissatisfaction, and damage to brand reputation. With longer or repeated attacks, a company may also face contractual penalties, especially if it has guaranteed service availability. DDoS attacks can also be carried out relatively cheaply, which increases their prevalence. Companies therefore need to have protective mechanisms and an incident response plan prepared for such events.

Real-World Examples

• 1An e-shop is taken offline during a sales campaign due to a DDoS attack.
• 2An online service records a sudden surge of requests from thousands of IP addresses at once.
• 3A company uses DDoS protection at the hosting or CDN level.
• 4Attackers demand a ransom to stop the attack.
• 5Traffic monitoring enables a fast response and minimizes downtime.