Combating DDoS Attacks in Web-based Services