Cisco has the easiest to grasp fundamentals [1], but to really understand DDOS attacks you'll have to dig down into learning about how TCP works and network lay

Cisco has the easiest to grasp fundamentals [1], but to really understand DDOS attacks you'll have to dig down into learning about how TCP works and network layers. Mitigation sounds non-commital because it is. I don't personally have any experience with mitigating a DDOS attack on Heroku, so I'm not qualified to talk about their prepardness, but DDOS mitigation varies quite a bit [2][3], running the entire gamut of "block a single IP address" to "there's hundreds of IP's rotating and attacking". So the answer to that would be: it depends on who you've pissed off or who's feeling particularly nasty that day. [1]: https://www.cisco.com/c/en/us/products/collateral/security/traffic-anomaly-detector-xt-5600a/prod_white_paper0900aecd8011e927.html https://www.cisco.com/c/en/us/products/collateral/security/t... [2]: http://www.continuitycentral.com/index.php/news/technology/624-the-evolving-nature-of-ddos-attacks-separating-the-wheat-from-the-chaff http://www.continuitycentral.com/index.php/news/technology/6... [3]: https://www.radware.com/newsevents/mediacoverage/changing-challenging-ddos-attacks/ https://www.radware.com/newsevents/mediacoverage/changing-ch...