Modern DDoS attacks have evolved beyond brute-force volumetric floods into stealthy, tactical methods that evade legacy defenses. Three key emerging attack types are examined: Pulse Attacks (short 30–120 second bursts that conclude before traditional out-of-path scrubbing centers can respond), Carpet Bombing (low-rate traffic spread across hundreds of IPs in a subnet to stay below per-host thresholds), and Outbound Attacks (botnet-driven traffic from infected subscriber devices that bypasses uni-directional monitoring). Cisco Secure DDoS Edge Protection counters these with a dual-pass ML system that learns per-host inbound/outbound traffic ratios, uses k-means clustering for behavioral profiling, and flags anomalies without relying on static signatures. Mitigation options include granular ACLs, BGP Flowspec, BGP RTBH, and scrubber redirection, with claimed TCO reductions of up to 60% for service providers.
