DTS DDoS Defense Service

Many modern businesses rely heavily on web-based applications and services. Such a dependency also raises the potential threat from DDoS attacks. These not only jeopardize smooth operations, but also the cooperation with partners and in simple terms the achievement of corporate goals as a consequence. For this reason, we have developed the DTS DDoS Defense Service using the leading solution from Arbor Networks in order to continuously protect against DDoS attacks.

The DTS DDoS Defense Service offers the following advantages:

  • Proactive DDoS detection, near real time, including reporting
  • IP-based multi-layer protection
  • Active (on-premises) DDoS protection in our data centers with blocking and mitigation, including automatic cloud signaling
  • Activation of the Arbor Cloud (with currently over 2 Tbit/s scrubbing capacity) to protect against large attack bandwidths
  • DTS Helpdesk Service & SOC as well as 9/5 or 24/7 telephone support available on request
  • Optional access to the DTS DDoS Defense Service System to view current traffic analyses

One Attack, Many Problems
DDoS describes a "Distributed Denial of Service". In a DDoS attack, the resources in a network, service or application are overloaded by concentrated attacks. The intention is to damage, shut down, infiltrate or even blackmail the target.

Attacks can take place in very different ways. The spectrum ranges from high-volume to subtle, hard-to-detect attacks. IT infrastructure devices, applications, security components or simply the entire bandwidth capacity are attacked. That said, however, combinations of different types of attacks are becoming increasingly common. In general, the frequency of attacks and aggressiveness is increasing massively. If an attack has already been successful, then it reveals the existence of a vulnerability. Further attacks are then to expected.

Multi-Level Protection Against all ThreatsActual protection is only possible after a DDoS attack has been detected. As a solution to this, we offer you multi-level, IP-based multi-layer protection. In contrast to DNS-based technologies, this protects your entire IP range, not just certain URLs.

Firstly, we offer our Peakflow SP module as a platform for network-wide protection and the efficient monitoring of data traffic. The module continuously analyses incoming traffic and receives detailed information about the traffic data, such as packet sizes or protocols. References are also created in order to register statistical deviations and protocol anomalies at an early stage of the emergency. Detecting the attack, incl. origin, target and method of attack, takes less than a second. In addition, an up-to-date dashboard facilitates transparency of the network traffic, status reports, efficient error diagnosis and usage optimization.

Secondly, our Threat Management System (TMS) comprises a further component that is interposed in the data network. If the SP module registers suspicious data streams, it initiates the redirection of the traffic through the TMS. The TMS has an extraordinarily high capacity of up to 80 Gbit/s and is able to filter or clean the data stream. This eliminates data garbage and only the relevant sessions remain undeleted. The reaction to the attack and the clean-up takes place on a redundant basis, and is automated and coordinated. In less than four seconds, the problem is isolated and fixed. Filtering takes place with the help of blacklists, whitelists, blocking by means of Geo-IP, packet filtering, the removal of botnets and malicious packets, anti-spoofing and throughput limits.

The Arbor Cloud represents the final instance. If the incoming volume of data is too high, the SP module automatically detects the threat. The traffic is then distributed to the cloud, filtered there and forwarded again. The mitigation cloud is connected permanently, but the actual rerouting only takes place when required. This minimizes the unnecessary lengthening of traffic routes and latencies. The Arbor Cloud has a capacity of over 2 Tbit/s. The globally networked SP modules anticipate up-and-coming attacks using monitoring and by developing countermeasures. The globally collected data furnishes all Arbor solutions with information on current threats.

Our Complete DTS Service for you
We offer you the provision of differentiated "in-cloud" services at peak flow level. Active on-premises protection for blocking and mitigation, including automatic cloud signaling, is provided in our data centers. If you wish, we also provide you with access to the DTS DDoS Defense Service System so that you can view the latest traffic analyses for your network. You can also benefit from our DTS Helpdesk Service & Security Operations Center (SOC). First and second level support is available 9/5 or 24/7. In addition, our security specialists in the DTS SOC constantly monitor your IT infrastructure and intervene immediately in the event of security incidents.

Contact

Alexander Wyrwol
Head of Sales -
Cyber Security

+49 5221 1013-741


alexander.wyrwol (at) dts.de