Mitigating Botnet-Based Ddos Attacks Against Web Servers