A pulse wave attack is a volumetric attack vector, one of the timing-based classes a thorough DDoS test is built to exercise. Rather than sustaining one continuous flood, it delivers short, sharp bursts of high-volume traffic on a repeating cadence, often every few minutes. Each pulse ramps to full force almost instantly, then stops before mitigation fully stabilizes, and the next pulse arrives before defenses have stood down. The pattern is engineered to exploit the reaction window of detection and scrubbing systems that assume a gradual ramp.
Why it matters in DDoS testing
Pulse waves attack time-to-mitigation directly: if scrubbing takes 30-90 seconds to engage and each burst lasts less than that, the target absorbs the full impact of every pulse. A test characterizes how quickly mitigation activates on a cold start, whether it stays engaged between bursts or repeatedly deactivates, and how the repeated cutover affects legitimate traffic. Reaction latency under bursty load is a core measurement in DDoS resilience testing.