DDoS: Understanding real-life attacks and mitigation strategies by Stefan Behte
- BGP ROA = Route Origin Authorization - signed record to prove AS is authorized to advertise a prefix
- there are gazillion ways to (D)DoS
- 90 percent of DDoS prevention for small to mid companies is finding a good vendor that'll do it for you