{"id":1522,"date":"2026-03-12T21:38:42","date_gmt":"2026-03-12T21:38:42","guid":{"rendered":"https:\/\/www.pickplace.de\/?post_type=glossary&#038;p=1522"},"modified":"2026-05-20T11:00:04","modified_gmt":"2026-05-20T11:00:04","slug":"ddos","status":"publish","type":"glossary","link":"https:\/\/www.pickplace.de\/en\/glossar\/ddos\/","title":{"rendered":"DDoS (Distributed Denial of Service)"},"content":{"rendered":"<p class=\"wp-block-paragraph\">One <strong>Distributed Denial of Service (DDoS)<\/strong> is an attack in which a system is deliberately overloaded by a large number of requests or messages. The goal is to impair or completely prevent the availability of a service or system. While DDoS attacks are often discussed in the context of internet services, they also play a role in <strong>Embedded Systems<\/strong> and industrial controls play an important role.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Principle of Operation of a DDoS Attack<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">In a classic DDoS attack, many compromised systems \u2013 often part of a so-called botnet \u2013 simultaneously send requests to a target system. This overloads the system's network bandwidth, processor performance, or internal resources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In embedded systems, such an attack could lead to, for example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Communication interfaces blocked<\/li>\n\n\n\n<li>Control commands can no longer be processed<\/li>\n\n\n\n<li>Real-time functions are disturbed<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The consequence is often limited or completely interrupted system function.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">DDoS attacks on bus systems in embedded systems<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Particularly critical are DDoS-like attacks on <strong>Bus systems<\/strong>, which are used for communication between components of a system. In many embedded architectures, there is only a single common communication medium through which all participants exchange data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Typical bus systems include, for example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Controller Area Network<\/li>\n\n\n\n<li>Ethernet-based fieldbuses<\/li>\n\n\n\n<li>SPI or I\u00b2C in local system architectures<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A participant who continuously clutters the bus with messages or sends messages at a high frequency can effectively block other participants. On a CAN bus, for example, a high-priority node can continuously send messages, preventing other control units from transmitting their messages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"> <\/p>\n\n\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-baf9a45\" data-block-id=\"baf9a45\"><style>.stk-baf9a45 .stk-img-figcaption{text-align:center !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-1683\" src=\"https:\/\/www.pickplace.de\/wp-content\/uploads\/2026\/03\/dos-flooding.svg\" width=\"3909\" height=\"1258\" alt=\"DDoS Flooding with the CAN Bus\"\/><\/span><figcaption class=\"stk-img-figcaption\">DoS Flooding with the CAN Bus<\/figcaption><\/figure><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Impact on Embedded Systems<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The consequences of such an attack can be significant depending on the application. In security-critical systems \u2013 such as industrial plants, vehicles, or military applications \u2013 blocked communication can have direct impacts on system function.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Possible consequences include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Loss of tax exemption<\/li>\n\n\n\n<li>Delayed or missing sensor data<\/li>\n\n\n\n<li>Failure of safety functions<\/li>\n\n\n\n<li>System restarts or watchdog resets<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Since embedded systems often operate in real-time, even a short communication blockage can cause critical states.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Protective measures<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Various measures are used to protect embedded systems against DDoS-like attacks. These include, for example:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Traffic monitoring and rate limiting<\/li>\n\n\n\n<li>Priority Management in Bus Systems<\/li>\n\n\n\n<li>Network Segmentation<\/li>\n\n\n\n<li>Authentication and integrity protection of messages<\/li>\n\n\n\n<li>Watchdog mechanisms and fail-safe strategies<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Securing the communication infrastructure is becoming increasingly important, especially in security-critical applications.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Significance for embedded development<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">DDoS attacks show that <strong>Availability<\/strong> is a central security requirement in embedded systems. In addition to classic security aspects such as authentication or encryption, resilience against communication overload must therefore also be considered.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For developers, this means already in <strong>System Design and Architecture<\/strong> Mechanisms must be provided that can detect and limit overload. This is a particularly important component of a robust embedded security strategy, especially for systems with shared bus systems.<\/p>","protected":false},"excerpt":{"rendered":"<p>Ein Distributed Denial of Service (DDoS) ist ein Angriff, bei dem ein System durch eine gro\u00dfe Anzahl von Anfragen oder Nachrichten gezielt \u00fcberlastet wird. Ziel ist es, die Verf\u00fcgbarkeit eines Dienstes oder Systems zu beeintr\u00e4chtigen oder vollst\u00e4ndig zu verhindern. W\u00e4hrend DDoS-Angriffe h\u00e4ufig im Kontext von Internetdiensten diskutiert werden, spielen sie auch in Embedded Systems und [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"footnotes":""},"class_list":["post-1522","glossary","type-glossary","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/glossary\/1522","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/glossary"}],"about":[{"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/types\/glossary"}],"author":[{"embeddable":true,"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":2,"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/glossary\/1522\/revisions"}],"predecessor-version":[{"id":1684,"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/glossary\/1522\/revisions\/1684"}],"wp:attachment":[{"href":"https:\/\/www.pickplace.de\/en\/wp-json\/wp\/v2\/media?parent=1522"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}