Dumb packet flood is easy. L7 DoS requires more sophistication, because the attack code needs to stateful (iow. establish sessions) and craft requests that are

Dumb packet flood is easy. L7 DoS requires more sophistication, because the attack code needs to stateful (iow. establish sessions) and craft requests that are better targeted. These in turn require either real effort or tools that reduce the effort. All of this implies one thing: packet flood mitigation has finally become so ubiquitious that dumb flooding is no longer lucrative. So one could say that due to lack of low-hanging fruit the attackers are now moving up in the value chain.