In-country DDoS mitigation is a DDoS mitigation carried out within a country's borders. In doing so, the data is processed, stored and backed up within the jurisdiction required by data sovereignty or localization laws.

IP refers to Internet Protocol

IP Blacklist & Whitelist is one of the core policies the mitigation platform enforces. The rule-set policies the incoming requests by allowing or denying access to requested resources based on predetermined criteria.

IP Flood is a type of DoS attack that floods random protocols and ports on a remote host. In doing so, fragments are sent in a jumbled, confused order. When the receiving machine attempts to reassemble them, it never knows how to handle such requests. Vulnerable hosts will crush and others will spend a lot of resources to make sense of garbled data.

IP Fragmentation Attack involves perpetrators exploiting an IP datagram's maximum transmission unit (MTU) to overload a system. This can be done by sending bogus ICMP and UDP packets that exceed the network MTU to the point where resources are consumed rapidly and the system becomes unavailable during packet reconstruction. Perpetrators can also execute a teardrop attack, which works by preventing TCP/IP packet reconstruction.

IPv4 refers to IP protocol version 4

IPv6 refers to IP protocol version 6

ISO stands for Industry Organization for Standardization

L7 Policy refers to the application layer mitigation policy implemented in Application Protection Service. It works on the HTTP/S level including HTTP authentication challenges.

LAND Attack This type of Bogons refers to a data packet whose source and destination information are within the same /24 IP range. A vulnerable machine will crash or freeze due to the packet being repeatedly processed by the TCP stack.

Load Balancing is a core networking solution responsible for distributing incoming service requests across multiple servers. The service requests may be HTTP or non-HTTP traffic.

Look-up Domain Attack is a form of DNS attack. It refers to situation that attackers setup domains that establish TCP-based connections with a recursive DNS server and keep the connections alive with random responses. The server is tied up and eventually exhausts its resources.

Martian Address This type of Bogons refers to a data packet originates from or is intended for an IP address that is reserved for special-use by the Internet Assigned Numbers Authority (IANA). Therefore, the data packet cannot originate as claimed, or be delivered.

Mixed Attack Type is volumetric in nature where more than one type of attack is identified. e.g. SYN flood + UDP flood

Multi-vector Attacks are the most complex forms of DDoS attack. Instead of utilizing a single method, a combination of tools and strategies are used to overwhelm the target and take it offline. Often times, multi-vector attacks will target specific applications on the target server, as well as, flood the target with a large volume of malicious traffic. These types of DDoS attacks are the most difficult to mitigate because the attack come in different forms and target different resources simultaneously.

Netflow is a feature that was introduced on Cisco routers that provides the ability to collect IP network traffic as it enters or exits an interface.

Network Depletion Attacks is an alternative term for Volumetric Attacks.

NTP Amplification Attack is a type of DoS attack in which the attacker exploits publicly accessible Network Time Protocol (NTP) servers to overwhelm the target with junk traffic.

Nuke is an attack where corrupt and fragmented ICMP packets are sent via a modified ping utility to keep the malicious packets to be delivered to the target. Eventually, the target machine goes offline. This attack focuses on comprising computer networks and is an old distributed denial of service attack.

NXDOMAIN means non-existent Internet domain name. If domain name is unable to resolved using the DNS, a condition called the NXDOMAIN occurred.

NXDOMAIN Attacks are symmetrical DDoS attacks that involve a large number of DNS clients sending queries for non-existing domains.

PCI-DSS refers to Payment Card Industry Data Security Standards.

Phantom Domain is a form of DNS attacks. Attackers set up phantom domains that do not respond to DNS queries. A recursive DNS server is forced to wait for responses, which consumes server resources, resulting in delayed or dropped responses.

Ping Flood is a form of ICMP Flood.

Ping of Death sends huge number of malformed ping packets to the victim host that leads to a system crash on a vulnerable system.