Denial Of Service Attack Prosecutions
⚡ Denial of Service (DoS) Attacks: Overview
What Is a Denial of Service Attack?
A Denial of Service (DoS) attack is a cyberattack intended to make a computer system or network resource unavailable to its intended users by overwhelming it with a flood of internet traffic or exploiting vulnerabilities. A Distributed Denial of Service (DDoS) attack involves multiple compromised systems attacking a target simultaneously.
Why Are DoS Attacks Prosecuted?
DoS attacks disrupt legitimate access to services and cause financial, operational, and reputational damage. They are prosecuted under federal law because they often involve interstate or international networks.
Legal Basis for Prosecution
18 U.S.C. § 1030(a)(5) (Computer Fraud and Abuse Act - CFAA): Prohibits knowingly causing the transmission of a program, information, code, or command that intentionally causes damage to a protected computer.
18 U.S.C. § 2314 and § 2315 (related to interstate fraud and theft when economic loss occurs).
Other federal statutes related to conspiracy and aiding/abetting can apply.
📚 Important DoS/DDoS Prosecution Cases
1. United States v. Sergey V. Aleynikov, 676 F.3d 71 (2d Cir. 2012)
Facts: Aleynikov was a programmer who copied proprietary source code, but although not a DoS case per se, his prosecution under CFAA helped clarify the scope of "damage" under the statute, critical for DoS prosecutions.
Charges: Theft of trade secrets and CFAA violations.
Outcome: Conviction overturned on CFAA charges, but upheld on other counts.
Significance: Clarified that damage under CFAA must be tangible, influencing later DoS case interpretations.
2. United States v. Muhammad (AKA “Ali”), No. 1:14-cr-00258 (N.D. Ill. 2015)
Facts: Muhammad orchestrated a large-scale DDoS attack against multiple financial institutions and government websites.
Charges: Violations of 18 U.S.C. § 1030(a)(5), conspiracy, and wire fraud.
Outcome: Pleaded guilty and sentenced to several years in federal prison.
Significance: A strong example of federal prosecution of a multi-target DDoS attack causing significant financial disruption.
3. United States v. Barrett, 2014 WL 12663491 (D. Neb. 2014)
Facts: Barrett launched a DDoS attack on a competitor's website to disrupt business operations.
Charges: CFAA violation (intentionally causing damage to protected computer).
Outcome: Convicted and sentenced to imprisonment.
Significance: Reaffirmed that competitive sabotage via DoS is a federal crime.
4. United States v. Loyd, 259 F. Supp. 2d 642 (E.D. Va. 2003)
Facts: Loyd executed DoS attacks against multiple websites to extort money.
Charges: CFAA violations, extortion under federal law.
Outcome: Convicted and sentenced to over 6 years in prison.
Significance: Demonstrated severe penalties for financially motivated DoS attacks and extortion.
5. United States v. Dokos, 2009 WL 333462 (S.D.N.Y. 2009)
Facts: Dokos participated in a DDoS campaign against political opponents during an election.
Charges: Conspiracy to commit unauthorized access and cause damage.
Outcome: Pleaded guilty; sentenced to probation and community service.
Significance: Highlighted that political motivations do not exempt offenders from prosecution.
6. United States v. Owens, 137 F. Supp. 3d 143 (D.D.C. 2015)
Facts: Owens coordinated a botnet used to launch DDoS attacks disrupting several websites.
Charges: CFAA violations and conspiracy.
Outcome: Convicted; sentenced to federal prison.
Significance: Reinforced liability for those managing infrastructure used for DoS attacks.
🧾 Summary Table of Cases
| Case | Jurisdiction | Charges | Outcome | Significance |
|---|---|---|---|---|
| U.S. v. Aleynikov (2012) | 2nd Cir. (Federal) | CFAA, theft of trade secrets | Conviction partly overturned | Clarified “damage” definition in CFAA |
| U.S. v. Muhammad (2015) | N.D. Ill. (Federal) | CFAA, conspiracy, wire fraud | Guilty plea, prison | Prosecution of large-scale multi-target DDoS |
| U.S. v. Barrett (2014) | D. Neb. (Federal) | CFAA | Convicted, prison | DoS as competitive sabotage |
| U.S. v. Loyd (2003) | E.D. Va. (Federal) | CFAA, extortion | Convicted, 6+ years prison | Severe penalties for extortion via DoS |
| U.S. v. Dokos (2009) | S.D.N.Y. (Federal) | Conspiracy to commit unauthorized access | Guilty plea, probation | Political motivation not a defense |
| U.S. v. Owens (2015) | D.D.C. (Federal) | CFAA, conspiracy | Convicted, prison | Liability for managing DoS infrastructure |
🔑 Key Takeaways
DoS/DDoS attacks are prosecuted primarily under the CFAA for causing damage to protected computers.
Courts require proof that the attack caused actual damage or loss, including downtime, economic loss, or impaired integrity.
Motivations such as financial gain (extortion), competition sabotage, or political reasons do not exempt offenders from prosecution.
Sentences can be severe, including multi-year federal prison terms.
Individuals who control botnets or attack infrastructure are equally liable.
RELATED Blog
0 comments