Distributed Denial of Service Attack (DDoS) differs from traditional DoS attacks. Traditional DoS attacks focus on weaknesses in the protocol itself, whereas DDoS attacks focus on weaknesses in a target’s infrastructure.

In a traditional DoS attack, the attacker sends malicious traffic to a single target, usually a computer system. In contrast, a DDoS attack floods a target with malicious traffic, often overloading the target’s ability to process legitimate traffic.

In addition to flooding a target with malicious traffic as a traditional DoS attack does, a DDoS attack also uses many techniques to make the attack more difficult to detect and contain.

A firewall is one of the most effective ways to prevent DDoS attacks. The firewall controls what IP addresses are allowed to connect to the network. If the firewall allows too much traffic, it will slow down or even completely shut off access to the network.

More info: Best Practices for IT Support in Small Businesses