Defending Web Servers Against Flash Crowd Attacks