DDoS attacks aim to disrupt online services by overwhelming them with massive traffic from compromised devices.Types of DDoS attacks include volumetric, protocol, and application layer attacks, with application layer attacks being the hardest to detect.The impact of DDoS attacks includes service downtime, increased infrastructure costs, reputation damage, and heightened security risks.Defenses against DDoS attacks include CDNs, rate limiting, traffic filtering, WAFs, behavioral analysis, and challenges like CAPTCHA.