Why DDoS attacks have become harder to stop
A DDoS attack overwhelms a service with traffic from many sources at once. The goal is not to steal data, but to take the service down. Modern attacks change method and target while they are in progress. The traffic comes from real IP addresses all over the world and looks like normal traffic. Static protection therefore reacts too late or too hard.
When a service goes down, customers, citizens and critical public functions are affected immediately. NIS2 and DORA also require services to be resilient and available. Availability is security.
How DDoS protection works
We build DDoS protection directly into the network, where the traffic actually flows. The protection works in three steps:
- Visibility: All traffic is monitored continuously, so we know what normal traffic looks like.
- Analysis: Anomalies are detected in real time, and attack traffic is separated from legitimate traffic.
- Response: Clear policies determine how the attack is stopped, in the routers, through scrubbing or in the cloud.
Most attacks are stopped automatically within seconds, while legitimate users get through. You get full insight into traffic before, during and after an attack, and the protection scales with your network to tens of terabits per second.
Defence in layers
From strategy to operations
Good DDoS defence starts with understanding what is critical to you. We map which services must always be available and what risks exist in your network. Then we design the architecture, from access to core, and set up automation driven by clear policies, tested in your environment. Threats and traffic patterns change constantly. That is why we monitor and tune the protection over time, preferably together with our Security Operations Centre (SOC).
DDoS protection from HPE and Nokia
We choose the solution based on your network, not the other way around. Both solutions build protection into routers you already have or are planning, including networks with equipment from several vendors.
HPE (Juniper and Corero): Corero SmartWall Threat Defense Director on Juniper MX and PTX stops attacks at line rate at the network edge, from 50 Gbps to 40 Tbps. No extra equipment is needed in the traffic path.
Nokia Deepfield: Deepfield Defender with Secure Genome combines visibility across the entire network with analysis in real time and global threat intelligence. Attacks hidden in normal traffic are quickly exposed and stopped directly in the network, on Nokia routers such as 7750 SR (FP4/FP5) and 7730 SXR (FPcx) or on selected routers from other vendors, such as Juniper MX. Suited to service providers and large networks with equipment from multiple vendors.
Powered by Knowledge.
Is your organisation protected well enough?
DDoS attacks rarely come with a warning. Our experts help you assess the risk and find the right protection for your network.
