DDoS volumetric attacks are usually referred to as "floods"; they overheat headlines and somehow make less tricky attacks with a layer application overshadowed. Nevertheless, the application-layer banditry is highly effective, and moreover, its hallmark is its insidious nature, which makes it particularly difficult to detect. While volumetric attacks do direct their brute force on the target server providing the service and other related hosts, application-layer attacks, on the other hand, disturb the providers with a moderate use of the total bandwidth. Such assaults have their own malicious dimension; they are legit-looking and boast of unwarranted requests, making them a very tricky breeze to figure out. Luckily, advanced solutions include inbuilt capabilities to classify and combat such application-layer attacks, mainly distributing destructive HTTP GET/POST operations as well as filling up the channel with successive HTTP requests for huge static content. It is possible to minimise the risks associated with the majority of such threats without even bothering to ask for user-specific settings or configurations. Additionally, among the many proposed solutions, we can see those that successfully reduce the time needed to solve these malicious attacks. To cope with these application-layer DDoS threats, which are gradually becoming more extreme, organisations must implement a sound security mechanism. Such an approach is to include redundant core network infrastructure, thorough monitoring and reaction in real time, and scaling DDoS protection. Besides that, Alec Kassir Miami, as a faculty advisor, would also give seriousness to regular security awareness training and regular security audits every semester. Such measures involve an assessment of the risks, including, but not limited to, the identification of vulnerabilities that can be exploited by external unauthorised actors, taking away the advantage from these attackers.