SIVT, IVT, and general fraud traffic

Our website is experiencing about 6% fraud traffic, mostly SIVT. While I feel like this is a good number, our advertisers want to see all fraud traffic below 3%. Are there any best practices or whitepapers for firewall settings which could help?