performance myth: DoS attacks myth: flooding DoS attacks (randomly spoof src, main attack type) only affect large commercial sites, are long in duration and at extremely high rates data: romania and brazil have disproportionate number of infected hosts (victims) other domains have roughly same ratio of infected/total machines