Soo-Jin Moon†, Yucheng Yin†, Rahul Anand Sharma†, Yifei Yuan§∗, Jonathan M. Spring ⋄, Vyas Sekar† †Carnegie Mellon University, §Alibaba Group, ⋄CERT/CC®, SEI, Carnegie Mellon University Abstract Many recent DDoS attacks rely on amplification, where an attacker induces public servers to generate a large volume