Botnet Attacks A botnet is a set of compromised devices the attacker controls remotely. That network can hold computers, servers, routers, cameras, NAS devices, phones and IoT equipment. The owner of the device often does not know that it is carrying out somebody else's requests.

DNS Amplification DNS amplification is a reflected DDoS attack in which the attacker uses open DNS resolvers to multiply the traffic aimed at a victim. The attacker sends relatively small DNS queries but forges the victim's address as the source.

Denial of Service / DoS DoS is a denial-of-service attack that tries to bring a service down or slow it so far that legitimate users can no longer use it. Unlike DDoS it need not come from a large network of compromised devices. Sometimes one source and a well-chosen vulnerability are enough.

Distributed Denial of Service / DDoS … is not data theft but choking the service into unavailability.

Ransom DDoS Ransom DDoS joins an attack on availability to extortion. The attackers threaten to bring the service down, or first run a short demonstration attack, and then …

Resource Exhaustion Not every availability question is a question of the network link. An application can fall on the database, on memory, on the thread pool, or on one endpoint th …

Service Abuse Service abuse uses legitimate functions of a system in an unforeseen way. The attacker does not have to find a classic vulnerability. It is enough to work out how a normal function can be automated, overloaded, or turned against the service and its users.

BGP Hijacking The consequence can be loss of availability, interception of traffic, or its diversion through a network that should never have been on that path. Sometimes it …

DNS Poisoning Unlike DNS amplification, which targets availability, DNS poisoning targets the integrity of the answer. The attacker wants to change the mapping between a name …

Model theft / extraction … nd access control protect the asset here, but not availability.

SCADA/OT Attack In OT, availability and the safety of the process are often more important than classic data confidentiality.