Production notes on Kubernetes, OpenShift, and OVHcloud: observability, log archiving, service mesh, LLM inference, and digital sovereignty. Zola 2026-06-27T00:00:00+00:00 https://blog.none.at/tags/application-security/atom.xml 2026-06-20T00:00:00+00:00 2026-06-27T00:00:00+00:00 aleks https://blog.none.at/blog/2026/2026-06-19-ddos-application/

<p>The third part of the (D)DoS series — but a step sideways: this post covers attacks at the Application layer that affect <strong>confidentiality and integrity</strong> rather than availability. SQL Injection, Log4Shell, and similar vulnerabilities have a different threat model than the DDoS attacks covered in the <a href="https://blog.none.at/blog/2026/2026-06-19-ddos-technical/">technical part</a>.</p>

2026-06-19T00:00:00+00:00 2026-06-19T00:00:00+00:00 aleks https://blog.none.at/blog/2026/2026-06-19-ddos-guide/

<p>This is the index and reading guide for a three-part series on denial-of-service and application security. The first two parts cover <strong>availability</strong> attacks — a service being made unreachable or unusable — at levels most people don’t associate with the term “DDoS”: the business level (losing the people who run the service), the social level (manipulating the humans behind it), the informational level (reputational disruption), and finally the technical level most readers expect (network floods, BGP hijacking, Layer 7 exhaustion). The third part is a deliberate step sideways, into application-layer attacks — SQL Injection, Log4Shell, the OWASP Top 10 — that threaten <strong>confidentiality and integrity</strong> instead of availability.</p>