NETSCOUT releases ML Arbor Edge

 To protect organizations from being hit by the increasing range of dynamic DDoS attacks, NETSCOUT (www.netscout.com) is combining its global threat intelligence with machine learning to create a ML-based Adaptive DDoS Protection system in the new version of NETSCOUT Arbor Edge Defence (AED) (www.netscout.com/product/arbor-aed-aem).

According to NETSCOUT's latest DDoS Threat Intelligence Report, there has been a significant increase in a new breed of dynamic DDoS attacks that use multiple vectors and techniques to launch botnet-based, direct-path, state exhaustion, and application-layer attacks designed to evade conventional static network and cloud-only-based DDoS defence.

Every enterprise is at grave risk today if they don’t deploy an effective DDoS solution on-premises to protect their network edge, internet-facing services, and critical stateful infrastructure such as firewalls and load balancers from these constantly evolving attacks.  Attackers can send dynamic direct-path DDoS traffic at any time, and they can quickly change attack vectors during the attack making them nearly impossible to defend without the right technology.  With AED’s Adaptive DDoS Protection, IT teams now have a scalable, always-on stateless packet processing solution that uses unmatched visibility into more than 50% of all internet traffic, global, real-time DDoS attack threat intelligence, decades of DDoS mitigation experience, and machine learning (ML) software intelligence to automatically detect, adapt to, and mitigate dynamic DDoS attacks.

“As cyber threats become more sophisticated and dynamic, IT teams need to out-smart bad actors with the ability to adapt and surgically block unwanted traffic at the network edge.  With AED’s Adaptive DDoS Protection, enterprises can take advantage of our DDoS attack expertise and minimize unnecessary workloads that force expensive upgrades with an always-on product that can scale to protect every edge from a single pane of glass,” says Scott Iekel-Johnson, AVP, DDoS and threat intelligence, NETSCOUT.

Deployed at the internet edge in front of any firewall, AED screens incoming and outgoing traffic using stateless packet processing, global DDoS threat intelligence, and ML to block inbound cyber threats, including DDoS attacks and other bulk malicious traffic.

AED protects and reduces the load on firewalls, load balancers, or VPN concentrators and stops the proliferation of malware within an organization and blocks outbound communications sent from compromised internal devices to sites run by bad actors to prevent data breaches and other malware activity.  AED also contains the threat while giving the IT team time to investigate and remove it before it can cause further damage.

In the event of a large volumetric DDoS attack, AED’s cloud signalling feature integrates with cloud DDoS protection providers, including NETSCOUT’s Arbor Cloud (www.netscout.com/product/arbor-cloud), to intelligently and automatically coordinate attack response between cloud-based volumetric protection and on-premise adaptive DDoS attack protection.