Denial-of-service victims share lessons learned