Tools / Cyber Security Interview Questions
How does a Distributed Denial-of-Service (DDoS) Attack differ from a DoS Attack?
| DoS | DDoS |
| Originates from a single source | Originates from many distributed sources, often a botnet |
| Easier to block by filtering one IP | Hard to block since traffic comes from thousands of IPs at once |
| Limited by one attacker's bandwidth | Limited only by the combined bandwidth of the whole botnet |
| Simpler to trace back to the attacker | Traffic sources are often spoofed or compromised third-party devices |
Because DDoS traffic looks like it's coming from legitimate, widely distributed users, mitigating it usually requires specialized scrubbing services or a Content Delivery Network that can absorb and filter volume far beyond what a single firewall could handle.
What typically powers a DDoS attack's distributed traffic?
Why is DDoS traffic harder to block than DoS traffic?
More Related questions...
