ATLAS & the ATLAS Intelligence Feed (AIF)

ATLAS is the world’s first and largest globally scoped threat analysis network. Launched in 2007 in partnership with a group of Arbor service provider customers, ATLAS delivers unparalleled visibility into the backbone networks that form the Internet’s core.

As the power of this data became evident to our service provider customers, participation has grown to more than 230 active participants today. Based on the actionable intelligence provided by ATLAS, service providers can make timely and informed decisions about their network security, service creation, market analysis, capacity planning, application trends, transit and peering relationships and potential content partner relationships.

As Arbor developed a DDoS mitigation solution for enterprise and government network operators, we innovated and created a way for customers to benefit from ATLAS’ valuable Internet-wide network intelligence. Security vendors all promise complete visibility on customer networks, and Arbor is no different in that regard. However, what Arbor can offer the network operator is visibility beyond the borders of their own network, across the entire Internet itself. No other vendor can offer this combination of micro and macro visibility into Internet-wide traffic intelligence.

Additionally, Arbor created the ATLAS Intelligence Feed (AIF) to further enable enterprise and government network operators to benefit from our ATLAS infrastructure. A common concern we hear is that IT teams are stretched thin, struggling to manage their complex infrastructure. They are yearning for solutions that simplify their jobs. Arbor developed such a solution in the AIF.

The AIF enables enterprise IT teams to leverage the global threat intelligence of the ATLAS data set together with the daily threat analysis of Arbor’s researchers, saving significant time by eliminating the need to manually update the latest attack detection signatures. This unique feed includes geo-location data and automates the identification of attacks against infrastructure and services from known botnets and malware while ensuring that updates for new threats are automatically delivered without software upgrades.

The ATLAS Intelligence Feed enables IT teams to directly benefit from the depth and breadth of Arbor’s Security Engineering & Response Team (ASERT). Most importantly, this integrated, automated threat intelligence enables customers to quickly stop DDoS attacks and malware threats before they impact critical business services.

ATLAS & AIF Benefits

ATLAS Security Portal

Arbor makes a subset of ATLAS intelligence available to the public through the ATLAS Security Portal. This portal displays host/port scanning activity, zero-day exploits/worm propagation, security events, vulnerability disclosures and dynamic botnet/phishing infrastructures. Additional portal features include:

• Global Threat Map – Real-time visibility into globally propagating threats
• Threat Briefs – Summaries for the most significant security events within the past 24 hours
• Top Threat Sources – A view of originating attack activity, based on country, ASN or host
• Threat Index – A summary of malicious activity traversing the Internet on that date
• Top Internet Attacks – A 24-hour snapshot of the major exploits launching attacks globally
• Vulnerability Risk Index – The most dangerous vulnerabilities being exploited on the Internet today