NETSCOUT SYSTEMS, INC. released its latest version of Arbor Edge Defence (AED)
July 2023 by Marc Jacob
NETSCOUT SYSTEMS, INC. released its latest version of Arbor Edge Defence (AED) which includes new ML-based Adaptive DDoS Protection.
According to NETSCOUT’s latest DDoS Threat Intelligence Report, there has been a significant increase in a new breed of dynamic DDoS attacks that use multiple vectors and techniques to launch botnet-based, direct-path, state exhaustion, and application-layer attacks designed to evade conventional static network and cloud-only-based DDoS defence.
Every enterprise is at grave risk today if they don’t deploy an effective DDoS solution on-premises to protect their network edge, internet-facing services, and critical stateful infrastructure such as firewalls and load balancers from these constantly evolving attacks. Attackers can send dynamic direct-path DDoS traffic at any time, and they can quickly change attack vectors during the attack making them nearly impossible to defend without the right technology. With AED’s Adaptive DDoS Protection, IT teams now have a scalable, always-on stateless packet processing solution that uses unmatched visibility into more than 50 percent of all internet traffic, global, real-time DDoS attack threat intelligence, decades of DDoS mitigation experience, and machine learning (ML) software intelligence to automatically detect, adapt to, and mitigate dynamic DDoS attacks.
Automated AED protects enterprises from threats
Deployed at the internet edge in front of any firewall, AED screens incoming and outgoing traffic using stateless packet processing, global DDoS threat intelligence, and ML to block inbound cyber threats, including DDoS attacks and other bulk malicious traffic. It protects and reduces the load on firewalls, load balancers, or VPN concentrators and stops the proliferation of malware within an organisation. AED can also block outbound communications sent from compromised internal devices to sites run by bad actors to prevent data breaches and other malware activity. It contains the threat while giving the IT team time to investigate and remove it before it can cause further damage. In the event of a large volumetric DDoS attack, AED’s cloud signalling feature integrates with cloud DDoS protection providers, including NETSCOUT’s Arbor Cloud, to intelligently and automatically coordinate attack response between cloud-based volumetric protection and on-premise adaptive DDoS attack protection.
Visibility into 50 percent of all internet traffic
NETSCOUT ASERT, the company’s expert security research and DDoS attack mitigation team, works with over 500 Internet Service Providers (ISPs) to maintain a unique sensor network called ATLAS. With over 400 tbps of international transit traffic received every second of every day from 93 countries, 600 industry verticals, and more than 31,000 autonomous systems, ATLAS provides ASERT with unmatched visibility into more than 50 percent of all internet traffic and real-time DDoS attack activity. ASERT analyses the ATLAS data and distributes its findings to the Arbor Edge Defence (AED) solution via the ATLAS Intelligence Feed (AIF). AIF continually arms AED with highly curated intelligence that constantly updates the IP addresses of bots and reflectors/amplifiers actively participating in DDoS attacks around the globe. Created from real-world ASERT mitigation experience, AED’s adaptive DDoS defence capabilities use ML-based algorithms to automatically recommend changes to attack countermeasures designed to stop dynamic DDoS attacks.