During the era of mobile Internet and Big Data, DDoS attacks become increasingly complex.

1. The peak attack traffic keeps growing. In 2013, the peak DDoS attack traffic exceeds 300 Gbit/s..

2. An increasing number of application-layer DDoS attacks occur in data center service systems..

3. The number of mobile service-specific DDoS attacks that come from mobile terminals increases rapidly.

4. Data centers are attack targets, and hackers can easily use a data center to launch attacks to external service systems.

Traditional anti-DDoS solutions in the industry cannot adapt to these changes.

Huawei Next Generation (NG) Anti-DDoS Solution performs abstract modeling and reputation system construction on network traffic from over 60 dimensions by leveraging Big Data analytics technologies. Compared to traditional anti-DDoS mechanisms in the industry, the Huawei NG Anti-DDoS Solution provides more precise and comprehensive DDoS attack defense.

Related Products

Anti-Large-DDoS: Heavy Traffic DDoS Attack Defense

• Multi-core, distributed hardware architecture and Big Data-based Intelligent Defense Engine1 provide T-bit defense performance.
• Instant attack response within seconds protects link availability.

Anti-App-DDoS: Application DDoS Attack Defense

• Performs all traffic collection and 3-7-layer packet-by-packet analysis, create traffics models from over 60 dimensions, and provides the most precise and comprehensive attack detection.
• Fine-grained reputation system consisting of local session behavior-based reputation, service access behavior-based reputation, geographical location based reputation, and botnet cloud-based reputation precisely guards against various lightweight, slow application-layer DDoS attacks launched by botnets.
• Full-scale defense against over 100 attacks guarantees continuous operations of key service systems that encompass enterprise web applications and DNS, DHCP, and VoIP services.

Anti-Mobile-DDoS: Mobile DDoS Attack Defense

• Dynamic, real-time upgrade of 20,000 fingerprints and filtering of traffic by a mobile botnet database effectively defend DDoS attacks launched by botnets and mobile terminals and guarantees authorized access to mobile gateways.
• Protects availability of mobile data service systems such as mobile payment, mobile store, mobile social networking, and mobile game.

Anti-Outbound-DDoS: Inbound-to-Outbound DDoS Attack Defense

• Blocks the global most active zombie, Trojan horse, and worm controlling traffic.
• Blocks C&C DNS request traffic.
• Prevents DDoS attacks at the source.

Managed-Anti-DDoS: Managed DDoS Attack Defense Service

• Provides Zone (VIP)/service-based automatic and manual defense policies and complete defense methods.
• VIP/service-based independent statistics reports and email sending simplify defense management.
• Increases VIP' service stickiness by providing Portal-based self-service functions for VIP.
• Supports large-scale operations, for example, 10,000 VIPs/services, and protects 10,000 IP addresses of each VIP/service simultaneously.

Comments:

1. IP reputation database Function will be ready in 2014Q4

2. AntiDDoS8030 with SPUC max performance can get 80Gbps, and SPUC will be ready in 2014Q4

3. AntiDDoS8080/8160 with SPUD max performance can get 480Gbp/960Gbps and SPUD will be ready in 2014Q4

IDC Secure and Profitable Operation

HUAWEI Anti-DDoS solution deployed at the IDC egress delivers the following functions:

1. Defends against attacks on the DNS server, for example, DNS protocol stack vulnerability attacks, DNS reflection attacks, DNS flood attacks, and DNS Cache-Miss attacks, and supports DNS cache for improved DNS server performance under heavy traffic

2. Defends against attacks on Web servers, for example, SYN flood attacks, HTTP flood attacks, CC attacks, and low-rate connection attacks.

3. Defends against attacks on online games, for example, UDP flood attacks, SYN flood attacks, and TCP attacks.

4. Defends against SSL DoS/DDoS attacks on HTTPS servers.

5. Provides customers with self-service policy configuration and report by operating Anti-DDoS as a security service.