Distributed denial of service (DDoS) attacks are an everyday occurrence. Traditional network-layer DDoS attacks can still threaten the infrastructure that provides network and service availability to all its tenants, subscribers, and customers, but due to large advances in the ability of defenses at Layer 3/4 to absorb network floods, DDoS attacks have been “shifting upwards,” targeting Layer 7 instead. With more public-facing apps, APIs, and microservices, Layer 7 DDoS attacks have become an easy-to-execute, cost-effective, and difficult-to-detect alternative to the traditional network-layer