Infrastructure Attacks vs. Application Attacks

Infrastructure Attacks vs. Application Attacks

An infrastructure attack aims to exploit vulnerabilities in the network layer or transport layer. These attacks are called DDoS attacks and include SYN floods, Ping of Death, and UDP floods.

Infrastructure attacks can be broken down into two subcategories: volumetric attacks and protocol attacks. Volumetric attacks focus on inundating a server with false requests to overload its bandwidth, while protocol attacks target specific protocols to crash a system.

Another type of denial of service attack is an application attack, which targets weaknesses in an application at the application layer to disrupt its functionality. Unlike infrastructure attacks, application attacks require only a small number of requests to achieve their intended impact, making them particularly difficult to detect.

Learn more: https://www.a10networks.com/blog/ddos-attack-prevention-and-ddos-protection-best-practices/