Cookie Challenge sends every visitor a cookie and requests that the client send it back. Legitimate browsers will do this seamlessly, while many bots cannot accept cookies and will fail the authentication test.

DDoS means a distributed denial-of-service attack under which a multitude of compromised systems attack a single target, thereby causing users of the targeted system to be deprived of the services of the targeted system. Since the incoming traffic flooding the victim originates from many different sources, it is impossible to stop the attack simply by using ingress filtering. It also makes it very difficult to distinguish legitimate user traffic from the attack traffic when spread across so many points of origin. The use of spoofing IP sender addresses further complicates the issue.

DDoS Mitigation shall mean the deployment of protection tools and techniques to resist and mitigate the impact of DDoS attacks on targeted networks and hosts. The attack mitigation process is guided by the attack handling flow to minimize interruption to the service users.

Detection Profile defines the threshold that will trigger a DDoS attack alert and activation of mitigation.

Detection Threshold defines the traffic level, when exceeded, indicating a possible DDoS attack is detected.

DNS refers to Domain Name System. It is a hierarchical and decentralized naming system for computers, services or other resources connected to the Internet. Basically, it translates the memorizable domain names to the numerical IP addresses for locating network services or devices.

DNS Amplification Attack is a type of DoS attack where attackers utilize the asymmetric nature of DNS protocol and send out a small look-up query with spoofed target IP, making the spoofed target the recipient of much larger DNS responses, in order to use up enough network bandwidth to paralyze the name servers.

DNS Flood is a type of DoS attack where a large number of DNS requests are sent to one or more name server in a particular zone in order to hamper the process of name resolution.

DNS Reflection Attack is a form of Reflection Attack where the source IP of forged DNS request is spoofed with the victim IP.

DNSSEC - DNS is often described as the Internet phonebook which is a fundamentally important service. DNS inherits various design, implementation and configuration vulnerabilities. One of them is the threat of DNS cache poisoning, which needs another security protocol, known as DNS Security Extensions (DNSSEC).

DPI refers to Deep Packet Inspection

FIN Flood is a type of DDoS attack that bombards the victim server with fake FIN packets that have no connection to any of the sessions stored in the server's database. This consumes lots of system resources to compare the incoming packets with the current transmissions resulting in loss of productivity and partial unavailability.

Geo-location is the identification or estimation of the real world geographic location of an object such as Internet-connected computer terminal. In its simplest form geolocation involves the generation of a set of geographic coordinates and is closely related to the use of positioning systems.

Global Offload is defined as the action taken by an entity of diverting inbound traffic via BGP, usually in the event of an overwhelming DDoS attack, to a third party service provider that will carry and scrub the attack and return only clean traffic to the entity.

Global Site Load Balancer works to distribute the workload across multiple geographically distributed data centre aiming to optimize use of resources as well as minimize response time, hence, improving user experience. GSLB is capable of detecting the availability of resources and avoid directing traffic to site with accessibility problem.

GTM refers to Global Traffic Management. See GSLB.

It is used to define the host with a specific IP address in the profiled network to be protected by OP services. The detection and mitigation policies will be set on this host profile for the implementation of OP. ‍

HTTP is an application protocol for distributed, collaborative, hypermedia information systems. It is the foundation of data communication for the World Wide Web.

HTTP GET Flood see HTTP/S flood

HTTPS is an extension of the HTTP for secure communication. The data channel is encrypted using Transport Layer Security TLS while its predecessor Secure Sockets Layer SSL is not recommended due to the security vulnerabilities with the protocol.

HTTP/S Flood Is a type of attack in which the attacker manipulates HTTP and POST unwanted requests in order to attack a web server or application. These attacks often use interconnected computers that have been taken over with the aid of malware such as Trojan Horses. Instead of using malformed packets, spoofing and reflection techniques, HTTP floods require less bandwidth to attack the targeted sites or servers.

HTTP X-Forwarded-For is a HTTP header field commonly used for identifying the originating IP address of a client connecting to a web server.

Hybrid DDoS mitigation is the combined mitigation methods deployed by local appliances which handle in-country local traffic and application attacks, and by our global cloud which handles global traffic and volumetric attacks.

ICMP Flood is similar in principle to the UDP flood attack: an ICMP flood overwhelms the target resource with ICMP Echo Request (ping) packets, generally sending packets as fast as possible without waiting for replies. This type of attack can consume both outgoing and incoming bandwidth, since the victim's servers will often attempt to respond with ICMP Echo Reply packets, resulting a significant overall system slowdown.

Incident shall mean any set of circumstances resulting in a failure to meet a commitment outside of scheduled and/or urgent maintenance window.