CyberGlossary

Attacks & Threats

Denial-of-Service (DoS) Attack

Definition

An attack that exhausts a system's bandwidth, compute, memory, or application resources so that legitimate users can no longer access the service.

A denial-of-service attack overwhelms a single target — a server, application, link, or device — from one or a few sources, with the goal of degrading or stopping its service. Techniques range from volumetric floods (saturating bandwidth) and protocol abuse (e.g., SYN floods exhausting connection state) to resource exhaustion at the application layer (slow HTTP attacks, expensive queries) and logic flaws that crash the service. While DoS attacks come from a single origin or a small set of hosts (distinguishing them from DDoS), they can still be very effective against under-provisioned systems. Defences include rate limiting, capacity planning, anycast, upstream filtering, and code hardening against resource-amplifying inputs.

Examples

  • An attacker uses a single host to send Slowloris connections that hold open the web server's worker threads until it can't accept new clients.
  • A vulnerability lets one HTTP request consume gigabytes of memory, crashing the service.

Related terms