ZEKASTRA

Threat profile

Denial of service (DoS and DDoS)

Overwhelming a service or its network link so legitimate users cannot reach it.

How it works

A distributed attack uses many devices, often compromised ones, to send more traffic or more expensive requests than the target can handle. Volumetric attacks fill the bandwidth; protocol attacks exhaust connection tables; application-layer attacks request costly pages repeatedly.

What to look for

  • Sudden growth in traffic from many unrelated addresses.
  • Timeouts for all users at once, with normal resource use on the application itself.
  • Many requests for one expensive page or endpoint.

What reduces the risk

  1. Put the service behind a content delivery network or a DDoS-protection provider.
  2. Cache static content and rate-limit expensive endpoints.
  3. Plan capacity and a contact with your provider before an incident, not during it.
  4. Do not leave your own devices exposed with default passwords; they are what attackers recruit.

Sources

This section is for defence and learning. Do not test systems you do not own or have written permission to test: unlawful access to an information system is an offence (Turkish Penal Code, Article 243).