Behavioral DDoS detection and mitigation