My alternative would be firstly to legislate that any network can only send packets that have a source address owned by them.

This would drastically cut down source address spoofing, which is the worst type of DDoS to try to cope with.

Secondly I'd setup a far better method of reporting and blocking traffic up the chain.