How do you detect and mitigate a Distributed Denial of Service (DDoS) attack at the application layer versus the network layer?