Advanced DDoS Protection
How IntelliGuard DPS defeats attacks that rival systems cannot
DDoS attacks are a major problem for online businesses. The continuing evolution of new attacks and their success in disrupting Internet services is evidence that current systems claiming to provide DDoS protection either fail to provide adequate protection or any protection at all for many attacks.
Some reasons for the failure of current DDoS defence systems to perform their claimed functions are:
They have evolved from, or are just tack-on additions to firewall and IPS systems that are not adequately designed to handle DDoS attacks
They simply look for bad behaviour based on anomalies rather than protect legitimate clients. Attackers can easily defeat them with attack traffic that doesn’t appear to be anomalous.
They look for signatures or fingerprints - methods which don’t work for most types of known attacks or new attacks.
They mostly cannot manage traffic at true line rate and therefore contribute to the success of attacks they try to defend by contributing to the attack’s success rather than providing protection.
They cannot provide sufficiently fine-grained analysis and traffic monitoring to protect individual network components and servers from attacks directed against individual network components and servers. IntelliGuard has developed world leading “Learn Rank & Protect” technology to protect online business from DDoS attacks and traffic floods.
IntelliGuard is the only system that protects a full hierarchy of network components against a full range of known and unknown attacks and traffic floods while managing and filtering traffic at true line-rate under worst case conditions.
The following attack scenarios illustrate how DDoS attacks are implemented and give examples of a variety of common easily crafted attacks that IntelliGuard defeats but which rivals either handle poorly or can’t defend at all.
| Small Packet Attacks | Multi-Level Protection | 3 Gbps Processing |
|
|
 Click to find out more |
| Many Servers, Only One Attacked | Simple UDP Flood | Browser Malware |
|
|
|
| Flash Crowd Events | Open Connection Attacks | |
|
|
Click here to download all the IntelliGuard Attack Scenarios
What others say
"... everyday experience with attacks on its customers and reveal that smaller "customer-tailored" attacks are taking over from the huge multi gigabit ..." -- Small and Sneaky" is the web attack trend for 2007 - Prolexic Jan 2007 |
"Prolexic has seen a 100% failure rate of several DDoS mitigation devices. In short the bad guys have proven themselves very efficient at circumnavigating the security put in place to stop them." -- The Prolexic Zombie Report Q1 - Q2 2005 |