What is a DDoS Attack? How to distinguish DoS, DDoS and a Network Scan?

Get the newest and most comprehensive DDoS course on Udemy, with a special price for limited time!


It's relatively easy to distinguish DDOS and dos. If it is from one single source it is DoS, if it's coming from multiple sources than it is Ddos. But actually the real question is, the real challenge sometimes is, how to distinguish a dos attack and a simple scan, what to do with it? does your contract include protecting against scanning activities? In most cases it doesnt, it's not included. Therefore, for such scenerious, you must be prepared for identifying what you see. So, what is the best way for that? Checking the volume of the traffic is not the best idea since both DoS and scan are generated by a single source. So what to do to identify? Check the ports!

So let's wrap up. a DoS activity is generated by one single IP towards the same destination port, a ddos activity is generated by a multiple source IPs with a higher volume. And destination is again, specific ports of your services. However, a scan activity is nothing but a traffic generated by one single source and it's going towards All the posts of the destination IP.

ddos,network security,ddos attack protection,ddos protection,web security,difference between dos and ddos,