A DDoS attack is an attempt by hackers, hacktivists or cyber spies to take down websites, slow down and crash the target servers and make online service unavailable by flooding them with traffic from multiple sources. As their name suggests, DDoS attacks are widely-distributed brute-force attempts to wreak havoc and cause destruction. These attacks often tend to target popular or high-profile sites, such as banks, news and government websites, to thwart or deter target organizations from publishing important information or to weaken them financially.
Defending against a Distributed Denial of Service (DDos) attack can be quite straight forward but there are a number of aspects of defense that must be considered.
- The majority of Distributed Denial of Service (DDoS) attacks are caused by exposed vulnerabilities in systems. Ensure your systems are patched and up to date, ideally within 14 days of patch release as advised by the NCSC in their Cyber Essentials Standard.
- Perform vulnerability scans every month and FIX the issues identified.
- Configure your firewalls to prevent your network from being flooded with traffic.