BADoS
acronymsecuritynetworking
Stands for: Behavioral Denial of Service
A defense that detects denial-of-service by learning normal traffic behavior.
Behavioral Denial of Service protection builds a baseline of normal traffic and mitigates deviations automatically, catching application-layer attacks that signature-based defenses miss.
Behavioural denial of service defence learns what normal traffic looks like for an application and treats significant deviation as an attack, rather than matching known signatures. It exists because application-layer floods consist of individually legitimate requests that no signature can distinguish.
The trade is the one every anomaly-based control makes. A baseline learned during unusual conditions encodes those conditions as normal, and a genuine traffic surge from a legitimate campaign looks exactly like the thing it is built to stop. That is why these systems are usually run in a learning mode long enough to see a full business cycle, and why a mitigation that engages during a product launch is a support incident rather than a success.
Also known as: bados, behavioral DoS