The effectiveness of attacks largely depends on organizations’ distributed denial-of-service defenses.