Denial-of-service attack
A denial-of-service attack is an attempt to make a system or service unavailable or degrade its ability to serve legitimate users by exhausting or disrupting its resources.
Secure APIs
A denial-of-service attack is an attack intended to make a service or resource unavailable to legitimate users, including by exhausting its processing or storage resources.
- How it is used
- Frames denial of service as an API availability threat spanning design, implementation, operations, and infrastructure.
- How deep it goes
- Explains attack goals, distributed and volumetric forms, concrete API exhaustion, OSI-layer examples, and architectural mitigations.
- Examples
- Uses unbounded GET /products retrieval, concurrent requests from multiple servers, ping floods, and network-layer flood and amplification attacks.
- What you can do after
- Diagnose/debug with it: recognize resource-exhaustion paths and select design, network, gateway, firewall, WAF, and threat-modeling controls.
Acing the CCNA Exam: Volume 2 Advanced Networking and Security
A denial-of-service attack is an attack that makes a system or service unavailable to legitimate users by exhausting or disrupting resources.
- How it is used
- Frames availability attacks and connects them to practical switch protections against excessive DHCP and ARP traffic.
- How deep it goes
- Explains attack flows and mitigation commands, but stops short of comprehensive DoS prevention or wireless countermeasures.
- Examples
- Uses SYN floods, DHCP exhaustion, reflection/amplification, RF jamming, and Cisco DHCP Snooping rate-limit output as concrete examples.
- What you can do after
- Diagnose resource-exhaustion patterns and configure DHCP Snooping rate limits that can error-disable abusive ports.
Distributed Machine Learning Patterns
A denial-of-service attack is an intentional or accidental activity that overwhelms a service with requests and prevents authorized access or normal operation.
- How it is used
- Protects model-serving systems and shared resource pools from request spikes that could exhaust capacity.
- How deep it goes
- Explains malicious and accidental causes, then gives a queue-based rate-limiting workflow with bounded concurrency.
- Examples
- Uses misconfigured clients, accidental load tests, unexpected traffic spikes, and four requests constrained to two concurrent operations.
- What you can do after
- Operate/configure request queues and concurrency limits to defend model-serving systems against excessive request load.
Read how Distributed Machine Learning Patterns explains denial-of-service attack →
Grokking Web Application Security
A denial-of-service attack is an attack that makes a system or service unavailable or unusable by exhausting resources or overwhelming its processing capacity.
- How it is used
- Frames loss of application availability as a direct consequence of hacking.
- How deep it goes
- Explains request flooding and ReDoS backtracking, then gives static-analysis and search-index mitigations.
- Examples
- Uses the 2016 Dyn outage and repeated expensive regex requests as attack examples.
- What you can do after
- Apply it via SonarSource rules or Elasticsearch to avoid user-controlled regex DoS.
Read how Grokking Web Application Security explains denial-of-service attack →
Related concepts
- rate limitaddressed by · A rate limit is a bound on the frequency or volume of operations permitted within a defined interval, scope, or concurrency limit.
- distributed denial of service attackincludes · A distributed denial-of-service attack uses traffic or requests from multiple sources to overwhelm a target and impair its availability or function.
- DHCP exhaustion attackincludes · A DHCP exhaustion attack is a denial-of-service technique that consumes a DHCP server's address pool so legitimate clients cannot obtain addresses.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.