DDoS threats and defense: How certain assumptions can lead to an attack