Characterization of defense mechanisms against distributed denial of service attacks