DDoS: Understanding real-life attacks and mitigation strategies by Stefan Behte
BGP ROA = Route Origin Authorization - signed record to prove AS is authorized to advertise a prefix
there are gazillion ways to DoS