What are the types of DDOS attacks? Inventory of common attack methods one by one

with the rapid development of digitalization, the network has become the core carrier of enterprise operations and personal life, and cyber security threats have also been escalating. Among them, DDOS attacks are one of the most common and destructive attack methods. Such attacks consume target network or server resources by various means, making them unable to provide services normally, bringing economic losses and reputational impact to enterprises. In order to help you better identify and prevent such attacks, this article will dissect the types of DDOS attacks from different dimensions, and make a detailed inventory of various common attack methods, so that readers can form a systematic and clear understanding of DDOS attacks.

What are bandwidth consuming DDOS attacks?

bandwidth consuming DDOS attack is the most basic and common type, its core goal is to exhaust the bandwidth resources of the target network, so that normal requests can not enter.

1, UDP flood attack

UDP flood attack using the characteristics of the user datagram protocol no connection, the attacker sends a large number of forged UDP data packets to the random port of the target server, the server will try to reply after receiving the data packet, but because the source of the data packet is forged, the reply can not be delivered, while the server will continue to process these invalid requests, eventually resulting in full bandwidth, normal traffic can not pass, which is a typical bandwidth-consuming DDOS attack means.

2, ICMP flood attack

ICMP flood attack is commonly known as ping flood attack, the attacker sends a large number of ICMP echo request data packet to the target, the target server needs to make an echo reply to each request, a large number of requests and reply data packets will quickly deplete the target bandwidth resources, making the target network paralyzed, unable to process normal business requests, such DDOS attack implementation threshold is low, easy to be exploited by attackers.

What are the resource exhaustion DDOS attacks?

Unlike bandwidth-consuming DDOS attacks, resource-depleting attacks aim to consume the system resources of the target server, such as CPU, memory, or number of connections, even if the bandwidth is sufficient, the server cannot function properly.

1, SYN flood attack

SYN flood attack using the TCP protocol three-way handshake vulnerability, the attacker sends a large number of forged SYN request data packet to the target server, the server will reply SYN + ACK data packet after receiving the request, and wait for the attacker to reply ACK to complete the handshake, but the attacker will not reply, the server will always remain semi-connected state, with the increasing number of semi-connections, the server's memory and connection resources will be exhausted, unable to accept new normal connections, which is extremely harmful resource-depleting DDOS attack.

2, CC attack

CC attack is mainly aimed at the Web server, the attacker by controlling a large number of puppet hosts, sending a large number of seemingly normal HTTP requests to the target server, such as repeatedly refresh the page, submit forms, etc., the server needs to process each request, a large number of requests will consume the server CPU and memory resources, eventually resulting in the server can not respond to normal user requests, such DDOS attacks are concealed, and it is difficult to distinguish from normal traffic in the early stage.

What are the methods of application layer DDOS attacks?

application layer DDOS attack is a means of attack against applications, directly targeting the business logic level, bypassing traditional network protection measures, and is more harmful and concealed.

1, HTTP head attack

HTTP head attack using the characteristics of the HTTP protocol, the attacker sends HTTP requests containing long or abnormal header information to the server, the server will consume a lot of CPU and memory resources when parsing these header information, and because the request seems to conform to the HTTP protocol specifications, traditional traffic cleaning equipment is difficult to identify, this kind of DDOS attack will make the server gradually lose the ability to handle normal requests when handling abnormal requests.

2, Slowloris attack

Slowloris attack consumes server resources by maintaining a large number of HTTP connections, the attacker sends incomplete HTTP requests to the server, such as sending only part of the header information, and then sending the remaining content at a very slow speed, the server will keep the connection waiting for the complete request, a large number of such connections will occupy the upper limit of the number of connections to the server, resulting in normal users can not establish a connection, which is a typical application layer DDOS attack method.

sum up, this article from the bandwidth consumption, resource exhaustion, application layer three dimensions inventory of common DDOS attack types and means, different types of DDOS attacks for the target and implementation of different ways, but the core is through the consumption of resources to destroy the target's normal services. A comprehensive understanding of the characteristics of these DDOS attacks is the basis for formulating effective prevention strategies, which will help enterprises and individuals to improve cyber security protection capabilities and reduce the risk of DDOS attacks.