But for such a "proof of power" a short attack which takes the service down once is enough, long attacks are not so common and actually require some work from the attacker