DDoS attackers combine a variety of methods to avoid detection and remain anonymous. These tactics include spoofing, reflection, and amplification. Spoofing allows the attacker to provide fake source addresses so the actual source address cannot be detected. Reflection utilizes thousands of different servers to mask the origin of the attack. Amplification sends a single forged packet to a website that causes legit services to send an overwhelming number of replies to the victim’s network or website.