Know the attack.
Defend with context.
A living, defender-first encyclopedia of denial-of-service, malware, identity, application, network, cloud, supply-chain and emerging attacks—organized by the layer and system each technique affects.
Version 1.1 · Reviewed August 15, 2026 · Maintained as threats and standards evolve.
Browse by attack surface
Mirai is classified as botnet infrastructure; the Layer 3, 4 and 7 techniques it delivers are classified separately.
DDoS — Layer 3
Network-layer floods and malformed IP traffic that exhaust paths, routers or packet-processing capacity.
DDoS — Layer 4
Transport-layer attacks against TCP, UDP, state tables and exposed network services.
DDoS — Layer 7
Application and protocol abuse designed to consume web, API, DNS, TLS or game-service resources.
IoT & Mirai Botnets
Compromised cameras, routers, appliances and proxy networks used as distributed attack infrastructure.
Ransomware & Malware
Malicious code used for extortion, persistence, espionage, destruction, theft or unauthorized computing.
Web & API Attacks
Attacks against authorization, input handling, sessions, business logic and server-side application behavior.
Identity & Social Engineering
Account takeover and human-targeted methods that abuse credentials, trust, recovery flows or authentication.
Network & Infrastructure
Traffic interception, routing manipulation, name-service abuse and local-network attacks.
Cloud & Supply Chain
Compromise through cloud control planes, dependencies, build systems, containers and trusted vendors.
Data, Insider & Impact
Theft, manipulation, destruction, extortion and misuse of privileged access.
AI & Emerging Attacks
Attacks against models, agents, training data and AI-connected tools, plus fast-evolving abuse patterns.
Attack library
Search by attack name, alias, protocol or framework reference.
4 results
Filtered catalog
DDoS — Layer 7
4 topicsApplication and API Resource Exhaustion
Valid requests are chosen for how expensive they are to answer, so a low request rate consumes disproportionate database, memory, downstream or financial capacity.
Open defensive briefHTTP Request Floods and Cache Bypass
Valid requests are sent in volumes, or aimed at routes, that cost the origin far more to answer than they cost the attacker to send.
Open defensive briefHTTP/2 and WebSocket Protocol Abuse
Features that make modern protocols efficient — stream multiplexing, header compression, persistent upgraded connections — become amplifiers when a client uses them adversarially.
Open defensive briefSlow-Rate and Handshake Exhaustion
Very little traffic occupies a disproportionate share of connections, workers or handshake capacity by being deliberately slow rather than fast.
Open defensive brief