Distributed Denial of Service (DDoS) Attack

Source: TH

Context: Karnataka’s property registration portal, Kaveri 2.0, faced severe disruptions due to a Distributed Denial of Service (DDoS) attack, impacting operations.

About DDoS Attacks:

  • What is a DDoS Attack?
    • A Distributed Denial of Service (DDoS) attack floods a server or network with excessive traffic, causing service disruptions.
    • It leverages a botnet a network of compromised devices—to send overwhelming requests to the target system.
  • How Does a DDoS Attack Work?
    • Botnet Formation: Hackers infect multiple devices with malware, converting them into bots.
    • Traffic Overload: The botnet directs massive fake requests to the target, exhausting bandwidth or processing power.
    • Service Disruption: Legitimate users experience slowdowns or complete service failure.
    • Diversion Tactic: Attackers may use DDoS as a smokescreen for data breaches or malware deployment.
  • How to Counter a DDoS Attack?
    • Traffic Filtering: Identify and block malicious requests using AI-based monitoring.
    • Rate Limiting: Restrict the number of requests per user to prevent overload.
    • Bot Detection Tools: Use CAPTCHA and behavioral analysis to block automated attacks.
    • Robust Authentication: Strengthen login security to prevent unauthorized access.
    • Incident Response Teams: Establish cybersecurity teams to monitor, detect, and mitigate threats.