1. A method of denial-of-service protection for a computer system comprises: collecting network data information from an interface receiving network data from one or more sources; collecting application data describing attributes of one or more software applications utilized by the computer system; identifying a subset of the network data as associated with the application data, the subset of network data including less than all of the collected network data; receiving a system exploitation indication identifying detection of an attempt by malicious code to access a predetermined memory address; analyzing the subset of the network data information to identify a malicious source corresponding to the malicious code, from the one or more sources; and processing network data originating from the malicious source to prevent denial-of-service, wherein processing the network data includes redirecting network traffic associated with the malicious source to another system, wherein at least a portion of the redirected traffic is analysed at the other system.