The Great Network Forgery (Root Causes of DDoS)

The irony is: by the time we finally are able to address egress filtering (I'd say 5-10y), attacks will have moved almost entirely to Layer 7 (like the Great Cannon attack on GitHub last year using gfw).