Layer 7 DDoS Intro

In Layer 7 attacks, the attackers targets application-layer (Layer 7 in the ISO model) processes with the intention of overwhelming its functions or features. These attacks typically consumes lower bandwidth compared to network layer attacks, but they can be just as devastating. This makes them hard to detect. The most common type of Layer 7 attacks are HTTP floods, where the attacker sends seemingly legitimate requests in too large numbers. Individually, the requests may seem legitimate, but the intensity leads to exhaustion of resources such as memory or CPU.