Distributed Denial of Service (DDoS) attacks are devastating and difficult to trace. The only defense is to use purpose-built appliances that stay a step ahead of the attackers. This Nemertes issue paper concludes that the unique characteristics of a DDoS attack, plus significant cost savings, make cloud-based services a better option.