NETSCOUT has introduced its Adaptive DDoS Protection for its Arbor® Threat Mitigation System (TMS). The system improves the detection of distributed attacks that dynamically change vectors and target numerous IP addresses simultaneously, including carpet bombing.
NETSCOUT ASERT, the company's expert security research and DDoS attack defense team, has documented a significant increase in dynamic distributed denial of service (DDoS) attacks that utilize multiple vectors and techniques to exploit botnet-based, direct-to-consumer attacks. To launch path, state exhaustion and application layer attacks. These are designed to bypass traditional static network and cloud-based DDoS defenses. Carpet bombing attacks have increased by more than 110%. It is particularly difficult for SOC teams to mitigate these attacks using conventional means because these attacks target large swarms of IP addresses rather than a single host, generating hundreds or thousands of alerts per attack.
DDoS: Analysis of data traffic in real time
Adaptive DDoS Protection analyzes traffic in real-time and automatically implements mitigation and countermeasures based on threat intelligence to block dynamic DDoS attacks as they evolve. Adaptive DDoS Protection provides SOC teams with a scalable, always-on, stateless packet processing solution that leverages unmatched visibility into more than 50% of all Internet traffic, real-time global DDoS threat intelligence, and decades of DDoS mitigation experience to combat dynamic DDoS attacks automatically recognize, adapt to and mitigate them.
Defense against carpet bombing
Carpet bombing attacks are among the most destructive tactics attackers can initiate because they target a wide range of IP addresses simultaneously, generating thousands of attack alerts that are impossible for SOC teams to manage. With Adaptive DDoS Protection, NETSCOUT has found a new way to understand DDoS traffic at the network level across all subnets to detect and report carpet bombing attacks in a single, easy-to-understand message. NETSCOUT's ML-based Precise Protection Prefix technology automatically determines the specific IP ranges targeted by the attack. These are then automatically forwarded to Arbor TMS for defense, even if the attack moves to other targets on the network. This Adaptive DDoS Protection capability dramatically improves the detection and mitigation of carpet bombing attacks.
More at Netscout.com
About NETSCOUT NETSCOUT SYSTEMS, INC. helps secure digital business services against security, availability and service disruptions. Our market and technology leadership is based on the combination of our patented smart data technology with intelligent analytics. We provide the comprehensive, real-time insight that customers need to accelerate and secure their digital transformation. Our advanced Omnis® cybersecurity platform for threat detection and mitigation offers comprehensive network visibility, threat detection, contextual investigations and automated mitigation at the network edge.