Adrian Johnson
TLDR:
- Alabama state government websites hit by denial-of-service (DoS) attack
- Cybersecurity and Infrastructure Security Agency (CISA) explains DoS attacks involve flooding a site with junk data
Some Alabama state government websites were targeted by a denial-of-service (DoS) attack, according to the Cybersecurity and Infrastructure Security Agency (CISA). This type of attack occurs when legitimate users are unable to access information systems, devices, or other network resources due to the actions of a malicious cyber threat actor. The attack, which started on March 12, did not result in a breach or unauthorized access to the state’s computers and information, as confirmed by Gov. Kay Ivey’s office.
The CISA explains that DoS cyberattacks involve flooding a site with junk data to overwhelm it and knock it offline, preventing access for legitimate users. This can result in downtime and financial losses for organizations while their resources and services are inaccessible. The state’s Office of Information Technology is working to mitigate the attack, and while some websites may experience temporary slowness during this process, efforts are being made to restore normal functionality.
Different methods for carrying out a DoS attack were outlined by the CISA, such as the Smurf Attack and the YN flood. The Smurf Attack involves sending spoofed Internet Control Message Protocol broadcast packets to hosts, flooding the targeted host with responses. The YN flood, on the other hand, saturates all open ports by sending incomplete connection requests, leaving the connected port unavailable for legitimate users.
In conclusion, denial-of-service attacks pose a significant threat to the availability and functionality of websites and online services. It is crucial for organizations to have robust cybersecurity measures in place to detect and mitigate such attacks effectively.
