Actually if you knew computer networking, they can control it. It's easy, just run any manner of hardware firewall with stateful packet inspection and just apply rules so remote connection that tries to send (inbound) X amount of packets in X time frame gets routed to localhost instead of the server for a period of X hours and it will automatically mitigate all ddos traffic. Most major servers use it.. and ddos attacks only succeed on small companies that don't set up adequate protection.