The DDoS landscape has evolved. Attacks are much more targeted, aimed at crippling individual servers or services rather than bringing down the entire network. Further, with the rapid growth of UDP-based services, previous generation DDoS solutions that protect networks from SYN floods render themselves obsolete. Additionally, an effective DDoS protection tool must be able to detect DDoS attacks close to the victim, track the origins of the anomalous traffic and mitigate the attack using existing network infrastructure.