How deeply does Azure Security cover distributed denial of service attack?

Explains public IP protection, traffic thresholds, protocol metrics, inspection, dropping behavior, and Basic-versus-Standard availability.

Distributed denial of service attack

As explained in Azure Security

A distributed denial-of-service attack is an attack that overwhelms a target with traffic or requests from multiple sources to disrupt availability.

A distributed denial-of-service attack overwhelms a public-facing application or Azure resource with traffic from multiple sources, disrupting availability and potentially causing lost revenue, reputational damage, recovery costs, and unexpected autoscaling charges. section 3.4

Azure DDoS Protection mitigates the attack at public IP entry points by:

Establishing thresholds for inbound SYN, TCP, and UDP traffic above usual observed levels. section 3.4.1
Analyzing traffic properties at the network and transport layers with proprietary detection and mitigation techniques. section 3.4.1
Dropping traffic identified as malicious while continuing to inspect legitimate increases, such as seasonal demand. section 3.4.1
Offering Basic protection at no additional cost, built into Azure without setup, alongside a Standard SKU. section 3.4.1

Online ordering application

An attack against an Azure shopping application can make ordering unavailable and trigger autoscaling in Application Gateway v2 or Virtual Machine Scale Sets. Azure DDoS Protection helps distinguish malicious traffic from legitimate customer surges. section 3.4 section 3.4.1

How Azure Security covers it

liveBook manning.com

Read Azure Security on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Secure APIsA distributed denial-of-service attack is a denial-of-service attack that uses traffic or requests from multiple distributed sources to overwhelm a service or resource.
liveBook manning.com

Grokking Web Application SecurityA distributed denial-of-service attack is a denial-of-service attack launched simultaneously from many networked systems or addresses.

Compare how 3 books explain distributed denial of service attack →

Related concepts

denial-of-service attackkind of · A denial-of-service attack is an attempt to make a system or service unavailable or degrade its ability to serve legitimate users by exhausting or disrupting its resources.
rate limitaddressed by · A rate limit is a bound on the frequency or volume of operations permitted within a defined interval, scope, or concurrency limit.
Azure DDoS Protection Standardaddressed by · Azure DDoS Protection Standard is an Azure service tier that provides enhanced protection for Azure resources against distributed denial-of-service attacks.
web application firewalluses · A web application firewall is a security system that inspects and filters application-layer web traffic to detect or block malicious requests targeting web applications and APIs.
API securitykind of · API security is the protection of application programming interfaces, their functionality, and exposed data from unauthorized access, misuse, alteration, and disruption.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.