How deeply does Grokking Web Application Security cover distributed denial of service attack?

Defines DDoS through request flooding and distributed sources, but stops short of prevention or response procedures.

Distributed denial of service attack

As explained in Grokking Web Application Security

A distributed denial-of-service attack is a denial-of-service attack launched simultaneously from many networked systems or addresses.

A distributed denial-of-service (DDoS) attack makes a web application unavailable by sending requests simultaneously from thousands of servers and different Internet Protocol addresses. Unlike an ordinary denial-of-service attack, it is harder to block by source. section 1.2

The Dyn outage

In 2016, DNS provider Dyn suffered a major DDoS attack. Popular websites including Amazon.com and Zillow.com became unavailable in the United States for much of the day. section 1.2

The attack does not need to penetrate a security perimeter; overwhelming servers with requests can consume the computing resources available to legitimate visitors. section 1.2

How Grokking Web Application Security covers it

Cover of Grokking Web Application Security

liveBook manning.com

Read Grokking Web Application Security on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Secure APIsA distributed denial-of-service attack is a denial-of-service attack that uses traffic or requests from multiple distributed sources to overwhelm a service or resource.
liveBook manning.com

Azure SecurityA distributed denial-of-service attack is an attack that overwhelms a target with traffic or requests from multiple sources to disrupt availability.

Compare how 3 books explain distributed denial of service attack →

Related concepts

denial-of-service attackkind of · A denial-of-service attack is an attempt to make a system or service unavailable or degrade its ability to serve legitimate users by exhausting or disrupting its resources.
rate limitaddressed by · A rate limit is a bound on the frequency or volume of operations permitted within a defined interval, scope, or concurrency limit.
Azure DDoS Protection Standardaddressed by · Azure DDoS Protection Standard is an Azure service tier that provides enhanced protection for Azure resources against distributed denial-of-service attacks.
web application firewalluses · A web application firewall is a security system that inspects and filters application-layer web traffic to detect or block malicious requests targeting web applications and APIs.
API securitykind of · API security is the protection of application programming interfaces, their functionality, and exposed data from unauthorized access, misuse, alteration, and disruption.

This explainer was generated by Manning's knowledge graph from the text of Grokking Web Application Security. The section links point to the parts of the book it draws on.