Companies like Arbor Networks have products like Peakflow[1] that are supposed to mitigate DDoS attacks by filtering the traffic. How are they not using tools such as those?
[1] http://www.arbornetworks.com/en/delivering-in-cloud-ddos-pro...
Disclaimer: I will be interning at Arbor this summer.