NATO employed Vietnamses fishing boats
Why bother with worm and zombie based DoS attacks when all you need is to pay for the diesel of a vietnamese fishing fleet?
Tell them that there is scrap copper on them there seabed, and let them dig up all the cables that connect <insert belligerant seabound countrty> to the rest of the innerneck, and physically DoS them (like they did to themselves some time back): - and then they cannot DoS you back unless they have a similar deal with someone else to take out your lines...
It worked during the US civil war (until they were disguised as grape vine leaders...)
About landlocked countries (albania etc), how about turning the routers off on links from your unfriendly nations, and ask other NATO members to do the same? Any attack that would get through would have to go through links to a neutral-ish (switzerland) or friendly (china) country, and seeing how slow access to .cn sites are today, I think that the threat could be ignored...
This would mean a huge cooperation between ISP's, cable companies and link providers alowing for a quasi-immediate, continental-wide response, and getting multinationals that operate in target/source countries to continue to operate in the same locale without prejudice after a cyberconflict.
All looks nice in theroy, but it's going to be a PITA to implement...
Cheers,
Daniel