Precision DoS/DDoS Attack Prevention
Detect and mitigate large volumetric and surgical DDoS attacks and stop them in real-time
Inbound denial-of-service attacks are attempts to make a network resource unavailable. Outbound attacks leverage network resources to attack something outside the network—these come from infected subscribers on the network who are part of a coordinated botnet, and they can damage the reputation of the source CSPs, potentially leading to blacklisting by the online community. Even if they aren’t completely successful, they can still have a major negative impact on subscriber quality of experience.
While effective for large-scale DDoS attacks, DDoS prevention alternatives lack the per-flow and subscriber awareness required to address the “low-and-slow”, and more surgical attacks on critical network resources and subscribers. Sandvine’s Network Security inspects every single subscriber flow in real-time so no potential threat gets missed. Additionally, when overload conditions are experienced on the network, Sandvine delivers mitigation at the NPU level that blocks malicious traffic without any impact on network resources. These capabilities extend to provide protection and mitigation of Layer-3/4 DDoS attacks like such as:
- SYN floods
- Flow floods
- Bandwidth floods
- IP-spoofing reflector attacks (e.g., DNS, NTP) that trick network resources into attacking subscribers
- Surgical DDoS attacks
- Fragmentation attacks
- Volumetric DDoS attacks
This inline solution uses behavioral heuristics to detect high-volume attacks for reporting, alarm notification, both manual and automatic mitigation options, and subscriber engagement to help remove malware, so you can protect your network services, subscribers, and reputation.
Cyber Security: Considerations and Techniques
This paper describes the wide variety of solutions that CSPs and enterprise Internet security professionals are juggling today, and explains the many advantages of using network policy control to deliver secure pipes to residential subscribers and business customers.