High-profile DNS amplification attacks have taught attackers how to become better at denial-of-service attacks, but organisations largely haven’t learned their lesson.