DDoS attacks have remained unaddressed until now because there are no real simulations that can demonstrate how an organization would cope with such an attack across its infrastructure, networks, applications and bandwidth providers. Existing preparation and defense mechanisms are based, in the best case scenario, on intelligent guessing and, in the worst case scenario, on industry best practices that do not take into account specific business needs and actual deployment.