Text this: Entity-based Parameterization for Distinguishing Distributed Denial of Service from Flash Events