Most enterprises don’t have the resources or expertise to build and operate their own DDoS defenses. As a result, the door is wide open for communications service providers (CSPs) of all sizes to step up to fill this critical gap for business subscribers. This is because CSPs are already in the direct path of clean and dirty traffic, and are optimally positioned to deal with DDoS attacks instead of simply routing the traffic to an off-net third-party Cloud DDoS scrubbing service. However, many CSPs are reluctant to build and operate scrubbing services due to large initial capex outlays and the complexity of operating DDoS defense products from legacy vendors. What is needed are modern approaches powered by machine learning that automates defenses and supports broad tenant scale in small form factors that positively change the economics of CSP-delivered DDoS scrubbing services.