Saturday, 8 December 2012

How do you measure the success of a DDoS attack?

Exactly two years ago, I wrote about being taken down by a distributed denial of service (DDoS) attack. One of the interesting things about this attack at the time was that the attacking botnet did not consist of compromised machines; instead, it was made up of computers whose owners had willingly volunteered to take part in the attack.

The attack against MasterCard was carried out by Anonymous as part of Operation Payback, after MasterCard decided to prevent WikiLeaks from accepting payments using MasterCard-branded products. Supporters of the campaign were able to take part in the voluntary botnet by installing an attack tool called LOIC (Low Orbit Ion Cannon). Other companies targeted during this campaign included Visa, Amazon, Moneybookers and PayPal.

But, why am I bringing this up two years later?

Yesterday, I read that a student had been convicted over the Anonymous cyber-attacks against PayPal. Before this conviction, BBC News reported that:
A student attacked the PayPal website as part of a concerted effort by the Anonymous "hacktivists" that cost the company £3.5m
More than 100 workers from PayPal's parent company, eBay, spent three weeks working on issues related to the attacks
However, that didn't quite correspond with what I remembered at the time. I wrote several news articles about the ongoing attacks two years ago, and was subsequently interviewed a few times by the BBC, so I ended up doing a fair amount of research to make sure that everything I wrote/said was correct. One thing I remember in particular was that PayPal claimed the attacks hadn't been successful.

After a bit of "creative googling", I rediscovered this entry on the PayPal blog, where the company stated that the attacks were not successful:
[...] all PayPal sites are fully operational.  Any reports to the contrary are simply untrue.  We can confirm that there have been multiple attempted distributed denial of service (DDoS) attacks on this week.  In addition, our API site was targeted today.  The attacks were not successful.
(bold/underlining is their emphasis; not mine)

This raises an interesting question: How do you measure the success of a DDoS attack? Is it merely related to performance and downtime, or would you argue that an attack which costs a company £3.5m was successful?


  1. These is apparently just like definitely great. Most of these modest items are designed through the use of variety of base consciousness. I love these significantly 먹튀폴리스

  2. Online football betting i99club, one of the world's leading online gambling sites, provides the best prices in football betting

    Ufabet1688 online betting website UEFA Bet is a 100% legal website with all licenses

    UEFA football betting, casino, slots, lottery, direct website 1688, stable financial, 100% UFABET168

    Fan wreath shop with free delivery, with pictures before-after sending with receipt.

    Sticking to the COVID-19 situation:

    Online Baccarat FOXZ24 Easy to apply, fast, deposit-withdraw 10 seconds with the system

  3. FOXZ88.NET online casino website Global standard 2020-2021

    Betting online gambling reminiscent of UFASCR.COM Baccarat.

    UFABET football betting website, the big brother of all UEFA networks, UFADNA, with an update The first modern system in 2021

    Web football i99PRO online lottery casino apply today for free 5000 bonus

    Kardinal Stick Siam - Relx a great promotion. Express delivery in 3 hours.

  4. Movie-watching websites that are more than movie-watching websites Because we are the number 1 free movie site in Thailand for a long time, including new movies, Thai movies, Western movies, Asian movies, we have all kinds of ways for you Including new series Full of all stories without interstitial ads to keep annoying anymore. One place

    Android and IOS operating systems. Watch online movies, Thai movies, Western movies, Asian movies, Cartoon movies, Netflix Movie, Action Movies, Comedy Movies, Crime Movies, Drama Movies, Horror Movies, Adventure Movies, Crash Movies and still have many new movies to watch. You can watch for free anytime, anywhere 24 hours a day at

    GangManga read manga, read manga, read manga online for free, fast loading, clear images in HD quality, all titles, anywhere, anytime, on mobile, tablet, computer. Android and IOS operating systems. Read top comics, action dramas, comedy, adventure, horror and manga. New coming every day to watch many more. Can be read for free anytime anywhere 24 hours a day at

    It is no secret that football is among the most popular and widely watched sports. Everybody who likes football tries to find the best platform for free soccer streaming. So, what are the best free sports streaming sites? We are going to answer this question. On this page, you can find a detailed overview of the most widespread soccer streaming websites. Keep on reading and make the best choice for you

  5. Are you looking free PDF Sharing List?. PDF entry is the means of submitting your site link in PDF form including your key phrase.

  6. Of course, your article is good enough, 온라인바둑이 but I thought it would be much better to see professional photos and videos together. There are articles and photos on these topics on my homepage, so please visit and share your opinions.

  7. I’m not sure exactly why but this weblog is loading incredibly slow for me. Is anyone else having this problem or is it a problem on my end? I’ll check back later on and see if the problem still exists. 안전놀이터순위

  8. I know what I'm going to do in the future. Thanks to you, I had a great time. I'll see you next time.사설토토사이트

  9. The sea of information is so wide.메이저놀이터추천 I'm glad I'm here.

  10. This is one very interesting post. I like the way you write and I will bookmark your blog to my favorites. 온라인홀덤