Sieve: Layered Network Defenses against Large-Scale Attacks