Zero Day + DOS/DDOS attacks

Introduction to Denial-of-Service (DoS) Attacks

Modern Businesses & Connectivity:

●Reliance on mission-critical systems and consumer platforms.

●Vulnerability to cyberattacks, specifically Denial-of-Service (DoS) attacks.

Types of DoS Attacks:

●DoS: Denial-of-Service

●DDoS: Distributed Denial-of-Service

●Zero-Day DDoS: Exploiting new vulnerabilities.

What is Denial-of-Service (DoS)?

Definition:

●Designed to disrupt or disable services.

Common Targets:

●Company websites, digital sales platforms, online customer databases.

Key Characteristic:

●Ties up critical network resources, blocking access for legitimate users.

Multiple Choice

What is the primary purpose of a Denial-of-Service (DoS) attack?

• To gain unauthorized access

• To disrupt or disable services

• To install malware

• To steal sensitive data

Examples of DoS Attacks

Buffer Overflow Attacks:

●Overwhelms networks with traffic until they can no longer function.

SYN Floods:

●"Half-open attack," starts connections without completing them, overwhelming servers.

Multiple Choice

Which of the following is a common method used in DoS attacks?

• Buffer Overflow Attacks

• Ransomware

• Phishing

• Keylogging

What is Distributed Denial-of-Service (DDoS)?

Definition:

●Uses multiple, distributed sources to attack, making it more aggressive and harder
to track.

Key Characteristic:

●Multiple computers (botnets) bombard a single target, leading to significant
disruption.

Multiple Choice

What distinguishes a Distributed Denial-of-Service (DDoS) attack from a DoS attack?

• DDoS attacks are less aggressive

• DDoS attacks are easier to track

• DDoS attacks use a single source

• DDoS attacks use multiple sources

Examples of DDoS Attacks

●
●Ping of Death:
○Sends oversized packets that overwhelm the server, causing crashes
or reboots.

●Slowloris:
○"Low and slow" attack, using minimal bandwidth to slowly create
multiple connections and block new ones.

Multiple Choice

What is a characteristic of a Slowloris attack?

• It targets outdated software

• It keeps connections open indefinitely

• It overwhelms a network with traffic

• 
  It uses multiple slave computers

What is Zero-Day DDoS?

Definition:

●Targets newly launched software/systems with unpatched vulnerabilities.

Key Characteristic:

●Hackers exploit these systems before developers can identify or fix issues.

Multiple Choice

What does the term 'Zero-Day' refer to in the context of DDoS attacks?

• Old software that is no longer supported

• Attacks that are easily detectable

• Newly launched software with vulnerabilities

• Attacks that occur on weekends

Examples of Zero-Day DDoS Attacks

Teardrop:

●Targets older systems unable to handle fragmented data packets, causing
service disruptions.

Botnets:

●Hackers take over computers to assist in DDoS attacks, often without the
user’s knowledge.

Multiple Choice

Which attack specifically targets older operating systems?

• Ping of Death

• Teardrop

• Buffer Overflow

• SYN Flood

Business Risks of DoS Attacks

●
●Revenue Loss:
○Website downtime can cost hundreds of thousands of dollars per day.

●Reputation Damage:
○Service interruptions lead to damaged customer trust and brand
reputation.

●Data Loss & Compliance Issues:
○Risk of data loss and legal/financial consequences due to
non-compliance with regulations.

Multiple Choice

What is a potential business risk of a DoS attack?

• Increased customer satisfaction

• Enhanced brand reputation

• Improved system performance

• Legal and financial issues

How Can Your Company Stay Protected?

Increase Bandwidth:

●Allows your server to handle higher traffic levels during an attack.

Establish a Backup Server:

●A failover system keeps operations running even if primary servers are compromised.

Invest in Managed Security Services:

●Early detection and response through 24/7 monitoring helps mitigate attack risks.

Multiple Choice

How can a company stay protected from DDoS attacks?

• By limiting user access

• By ignoring suspicious activity

• By increasing bandwidth

• By reducing server capacity

Conclusion

●DoS & DDoS Attacks:
○One of the most dangerous cyberweapons deployed by hackers.

●Proactive Measures:
○Understanding risks and preparing your business will help mitigate the impact
of DoS attacks.