DDoS Distributed Denial of Service Types - bandwidth Protetion (sort of): - Firewalls: may not actually protect - IDS/IPS: inline; no protection against day 0 attacks, as the IDS/IPS needs to have seen the attack before to get a profile. - Black hole routing: redirecting attack traffic into a black hole. Good to control collateral damage, but ensures successful DDoS, as the customer is ...