If the firm really wants five-nines, has a alarming amount of money and is willing to spend it, you may want to speak with arbor networks --
http://www.arbornetworks.com/standard?cid=4&tid=6
This product specifically addresses DoS attacks. It is not cheap.