How does a DDoS attack differ from normal traffic spikes?

Normal traffic spikes are usually gradual and correlate with events like promotions or news coverage. DDoS attacks, however, are sudden, unexpected, and often involve a high volume of traffic from numerous, often distributed, sources. The traffic patterns are frequently anomalous compared to historical data.