As the size and frequency of DDoS attacks continue to grow, so, too, does the diversity of these attacks. Internet-facing organizations are discovering they must protect themselves from two types of DDoS attacks – volumetric-based attacks and more targeted attacks against applications (i.e., HTTP, DNS, VoIP). This paper exposes the growing threat of application-layer attacks and their impact on revenue, profit, productivity and brand reputation, and discusses the solutions available to help detect and mitigate these evolving threats.