LearnViz CompSci
Home / Learn / Security & Cryptography / Denial of Service

Intermediate Topic 28 of 51 Security & Cryptography

Denial of Service

Overwhelming a service to make it unavailable.

How it works

A denial-of-service attack tries to make a service unavailable by exhausting resources such as bandwidth, CPU, memory, connections or application logic. Volumetric floods saturate links, protocol attacks like SYN floods consume connection tables, and application-layer attacks send expensive requests. Distributed denial of service uses many compromised devices, a botnet, and reflection and amplification via DNS or NTP servers to multiply traffic.

Step-by-step walkthrough

  1. Many requests arrive at once.
  2. They exhaust bandwidth, connections or CPU.
  3. The server is too busy for real users.
  4. A distributed attack uses thousands of machines, a DDoS.
  5. Defences: rate limits, CDNs and scrubbing.

Where it is used

Websites, games, payment services and APIs face these attacks, and defenders use CDNs and scrubbing services, rate limiting, autoscaling, anycast, SYN cookies, caching and web application firewalls.

Common pitfall

Overprovisioning alone cannot stop large attacks. Algorithmic complexity bugs, such as regular expression backtracking or hash collisions, let a single request cause heavy load. Application endpoints without limits, like search and login, are weak spots. Plan incident response, monitor traffic baselines and design graceful degradation.

Where it fits in the course

Denial of Service is topic 28 of 51 in Security & Cryptography, rated Intermediate. It follows Buffer Overflow. The next topic is Man-in-the-Middle Attacks.

Practice and explore

How to study this topic

  1. Read the explanation above and restate the definition in your own words.
  2. Open the interactive lesson and answer its mini quiz.
  3. Read the common pitfall, then write a short example that avoids it.
  4. Check your understanding in the Security & Cryptography quiz, and revisit the topic if you miss a question.

Frequently asked questions

What is Denial of Service?
Overwhelming a service to make it unavailable. It belongs to Security & Cryptography and is an intermediate-level topic.
Where do people use Denial of Service?
Websites, games, payment services and APIs face these attacks, and defenders use CDNs and scrubbing services, rate limiting, autoscaling, anycast, SYN cookies, caching and web application firewalls.
What is the most common mistake with Denial of Service?
Overprovisioning alone cannot stop large attacks.
What should I learn before this topic?
Start with Buffer Overflow, the topic just before it in Security & Cryptography.
How can I practice it?
Answer the mini quiz in the interactive lesson, then take the Security & Cryptography quiz.
Is Denial of Service hard to learn?
It is an Intermediate topic. Be comfortable with the Beginner topics in this area first, then read the common pitfall carefully, since it is where most mistakes happen.
How long does it take to learn Denial of Service?
Most learners can read the explanation and finish the interactive lesson in under an hour. Fluency comes from applying the idea, so plan a few short practice sessions with the quiz.
Which topics are related to Denial of Service?
Buffer Overflow, Man-in-the-Middle Attacks, CSRF are closely connected. The full list is in the related topics section of this page.
What should I study after Denial of Service?
Continue with Man-in-the-Middle Attacks, the next topic in Security & Cryptography.

Related topics