In the middle of revision, you open a study site and it just… stalls. No error message. No dramatic “you’ve been hacked.” Just endless loading.
That feeling is the point of a Denial of Service attack. In IB Computer Science, DoS and DDoS attacks matter because they target the one part of security students forget until it disappears: availability. Examiners love them for the same reason. They’re simple to describe, easy to compare, and they reward clear cause-and-effect.
Quick IB Computer Science checklist (what to say for marks)
For IB Computer Science answers, aim to include:
-
A definition of DoS (one source overwhelms a service)
-
A definition of DDoS (many sources overwhelm a service)
-
The security principle affected: availability (CIA triad)
-
The mechanism: flooding requests to exhaust bandwidth/CPU/memory
-
The result: slowdown, crash, or legitimate users blocked
-
At least two mitigations (rate limiting, filtering, load balancing, specialist protection)
What is a DoS attack in IB Computer Science?
A Denial of Service (DoS) attack happens when a single attacker (or one main source) sends so many requests to a server, network, or service that it becomes overloaded. The service may still be “secure” in the sense that passwords and encryption are fine, but it becomes unusable.
In IB Computer Science, the key phrase is that DoS attacks target availability, not confidentiality (secrets) or integrity (correctness). A good exam explanation links the overload directly to resources: processing time, RAM, or network bandwidth.
If you want to practise writing this in exam style, the A2.4 Network Security topic page is a clean place to align your wording with the syllabus.
How DoS attacks work (mechanism you can explain fast)
Most DoS attacks don’t need “Hollywood hacking.” They exploit something ordinary: systems must accept incoming traffic to function. The attacker sends a flood of normal-looking requests, forcing the server to spend time responding.
Typical outcomes:
-
Requests queue up, so response time becomes extremely slow
-
The service hits resource limits and stops responding
-
Legitimate users time out and effectively lose access
This is why DoS is such a useful IB Computer Science example: the attack can look like normal use, just at an impossible scale.
To connect this to wider network concepts, RevisionDojo’s Networks notes help you revise bandwidth, protocols, and how traffic moves through a system.
What is a DDoS attack (and why the “distributed” part matters)
A Distributed Denial of Service (DDoS) attack is the same end goal as a DoS attack, but the traffic comes from many devices at once. These devices are often compromised machines controlled by an attacker, commonly called a botnet.
In IB Computer Science, the highest-mark comparison is straightforward:
-
DoS: one major source floods a service
-
DDoS: many sources flood a service, often coordinated
The “distributed” part matters because blocking one IP address or one machine doesn’t solve the problem. The traffic is coming from everywhere.
For broader context (and good linking sentences in essays), see Network Security Threats IB Computer Science Students Must Know.
Why DDoS is harder to stop (the examiner-friendly reasoning)
DDoS attacks are more dangerous because:
-
Volume: combined traffic can be enormous
-
Diversity: traffic originates from many networks and locations
-
Plausibility: requests can appear legitimate
-
Persistence: attacks can be maintained for longer without a single point of failure
A strong IB Computer Science answer states that defenders must keep the service public, so they can’t just “block everything” without denying real users too.
Mitigation strategies you can mention in IB Computer Science
Mitigation is about reducing impact, not guaranteeing prevention. Common measures include:
-
Traffic filtering (drop suspicious patterns)
-
Rate limiting (cap requests per user/IP)
-
Load balancing (spread demand across servers)
-
Specialised DDoS protection services (absorb and scrub traffic)
If you’re revising security tools alongside this, pair it with Firewalls vs Intrusion Detection Systems (IDS) to show examiners you understand prevention vs detection.
To practise the exact phrasing exam questions reward, use the A2.4 Network Security Questionbank and train yourself to write “availability” automatically.
Common student mistakes (and how to fix them)
Students lose marks in IB Computer Science when they:
-
Describe DoS as “stealing data” instead of denying access
-
Forget to name availability explicitly
-
Explain DDoS without mentioning many sources or a botnet
-
List mitigations without linking them back to the overload problem
A simple fix: write one sentence of mechanism (flood requests) and one sentence of impact (legitimate users can’t access the service). Then add one sentence of mitigation.
Conclusion: the IB Computer Science takeaway
DoS and DDoS attacks are simple in concept and powerful in impact: they make systems unavailable by overwhelming resources. For IB Computer Science, the winning move is to frame everything around availability and explain the chain: flood traffic --> exhaust resources --> real users get blocked.
When you’re ready to turn understanding into marks, RevisionDojo is built for this exact moment: practise with the Questionbank, lock in definitions with Flashcards, tighten explanations using AI Chat and Grading tools, and test yourself with Mock Exams and Predicted Papers. Start from the central hub at Computer Science (CS) and make availability a topic you never forget again.