Arbor Networks

Can you protect your fragile mobile infrastructure from Internet-sourced DDoS attacks? Are you relying on already stressed, inline security devices such as firewalls for this protection? According to Arbor’s 5th Annual Worldwide Infrastructure Security Report , Denial of Service attacks continue to be the number one concern of fixed broadband providers around the world. As mobile broadband networks become more like fixed broadband networks, mobile operators will undoubtedly experience the same threats to their mobile subscribers and infrastructure as fixed broadband operators.

A common attack vector is Internet-sourced DDoS attacks that target specific devices in the mobile network. For example, attackers know that mobile infrastructure devices such as SGSNs, GGSNs and firewalls are already stressed. Therefore, they target these devices with TCP session attacks—causing them to fail due to state exhaustion. Once these inline devices fail, the impact is severe.

Arbor’s Peakflow SP and Peakflow SP Threat Management System (TMS) provide a comprehensive threat detection, mitigation and reporting solution that can be deployed on the Gi/SGi interfaces of the GGSN/PGW—allowing you to protect your mobile infrastructure from threats such as Internet-sourced DDoS attacks. In fact, some mobile operators even deploy Peakflow SP TMS in front of firewalls to help them stay up and continue to do what they were intended to do—that is, NAT and block unsolicited inbound traffic to mobile networks. Other Peakflow SP and Peakflow TMS key features include:

• Multiple methods of threat detection and real-time mitigation (including TCP session attacks and DNS attacks).
• Different models of Peakflow SP TMS providing 1-40Gbps of surgical mitigation of attack traffic.
• Out-of-band deployment.