New AI solution from NETSCOUT

Cybersecurity, service assurance, and business analytics solutions providers, NETSCOUT SYSTEMS (www.netscout.com) develops an innovative AI-based solution that uses unique global visibility and an automated AI analytics engine to automatically and instantaneously block DDoS attacks  whilst reducing operational overheads and business risk.

Leveraging NETSCOUT’s ATLAS network, an unmatched source of visibility into DDoS attack activity on the Internet, the solution analyses, curates and correlates multiple ATLAS datasets using artificial intelligence.  This automated intelligent pipeline is developed using NETSCOUT's ATLAS Security Engineering and Response Team (ASERT) expertise to identify botnet members and other network infrastructure that is actively participating in DDoS attacks.

This intelligence is continuously updated and shared in real-time with NETSCOUT's industry-leading Arbor Threat Mitigation System (TMS) and Omnis AED Smart DDoS attack protection solutions via the Omnis ATLAS Intelligence Feed (AIF).  This new Omnis AIF content enables TMS and AED to know, in advance, the IP addresses of devices across the Internet that are being used to launch DDoS attacks, resulting in the ability to instantly block up to 90% of attack traffic, without further analysis, during an attack.

This data provides TMS and AED with the intelligence needed to automatically stop botnet-generated DDoS attacks, including reflection/amplification, direct-path TCP state exhaustion, application-layer, and encrypted attacks.  The analysis behind Omnis AIF is based on NETSCOUT's unique, global DDoS attack visibility extending to more than one-third of all Internet traffic and millions of DDoS attacks. This global intelligence can then be applied automatically for local protection.

“This is an innovative way to block DDoS attacks,” states Darren Anstee, Chief Technology Officer for Security, NETSCOUT.  “Omnis AIF, which incorporates the new DDoS reputation feed, takes an intelligence-based approach providing customers with faster, more comprehensive, and more automated solutions.  Our approach is different because we leverage global observations in DDoS attack activity to drive local automation and response.   With this intelligence-based approach, customers will experience less business impact from legitimate blocked traffic and spend less time analysing DDoS attacks.”