1. A method comprising: receiving data collected by a network for a plurality of calls that are to be routed by the network to a call center; detecting, by a network device, an event based on the received data; determining a confidence level, for the event, that the event is a denial-of-service attack; determining a call service to be provided to the call center in response to detecting the event; and providing the call service based on the confidence level.