Techniques and strategies for mitigating Distributed Denial of Service attacks: malicious traffic filtering, rate limiting, blackholing, scrubbing centers, use of CDNs and anti-DDoS services, configuration of application and network firewalls, behavioral traffic analysis, L3/L4 and L7 protection, capacity planning and over-provisioning, and incident response for volumetric, protocol-based, and application-layer attacks.