Nokia revealed an expanded set of Distributed Denial of Service (DDoS) mitigation capabilities of its Defender Mitigation System (7750 DMS-1) through advanced DDoS countermeasures. These countermeasures allow the DMS to meet the growing demands of communications service providers (CSPs) and large digital enterprises to fight the latest generations of DDoS attacks with improved efficiency and cost efficiency. Over the last two years, DDoS attacks have become more frequent, sophisticated, and potent with many CSPs and enterprises registering over 100 attacks daily.

In 2023, more than 60% of all DDoS attacks were botnet-based, posing great challenges for legacy DDoS solutions and systems to detect and mitigate them. In 2024, DDoS threats come in a variety of new disguises, including free web browsing proxies that can be used to orchestrate botnet DDoS attacks without the knowledge of end-users. The ever-changing DDoS threat landscape is driving the need to neutralize new generations of DDoS attacks with improved speed, efficiency, and precision.

A better approach to DDoS security is required to protect services and customers against a new scale of DDoS attacks (tens to hundreds of Gbps, occurring regularly), new levels of attack complexity (from many more sources to many more destinations and involving tens to hundreds of thousands of endpoints in case of botnet DDoS), and at a whole new level of concurrency (e.g., hundreds of simultaneous attacks). The new release of 7750 DMS-1 delivers Advanced Countermeasures Engine (ACE) functionality with L4-L7 stateful inspection of IP packets, allowing 7750 DMS-1 to combat all types of DDoS attacks ? from volumetric to botnet and application-layer attacks ?

with a new level of agility and cost efficiency. The ACE functionality on 7750 DMS-1 is a testament to Nokia?s commitment to innovation, further enhancing Nokia?s unique combination of AI-driven big data analytics in Deepfield Defender and advanced IP networking technology, including the Nokia state-of-the-art routers powered by FP5 silicon. At the heart of the Nokia DDoS security solution is Deepfield Defender ?

an ?all-seeing, all-knowing? AI-driven big data processing platform that analyzes network telemetry information obtained from the network and correlates it with the ?security map of the internet,? the Deepfield Secure Genome® data feed.

Using advanced AI/ML learning and algorithms, Defender makes real-time decisions about how to neutralize DDoS threats and attacks by activating mitigation on the network edge or a dedicated, next-generation mitigation platform, Defender Mitigation System (7750 DMS-1). The Nokia 7750 DMS-1 boosts DDoS mitigation efficiency with an array of new features, such as a full global map of DDoS botnets, improved DNS server protection, packet validation, and selective geo-IP blocking. 7750 DMS-1 has been designed to address stringent network security requirements driven by both networking and security teams.