The document discusses advanced DDoS protection solutions for service providers and managed security service providers (MSSPs). It outlines key factors for MSSP success, including true DDoS protection capabilities, scalability, flexible deployment options, customer-centric reporting, and marketing differentiation. Radware's solution is presented as providing industry-leading coverage against various attack types, short time to protection, out-of-the-box protections, and support from Radware's emergency response team. A case study highlights how Radware helped a major hosting provider implement in-cloud DDoS protection and offer the service to customers.

1. Advanced DDoS Protection for Service Providers & MSSPsRon Meyran – Director Product Marketing SecurityJuly 2011

2. AgendaDDoS Is Growing & EvolvingKey Success Criteria for Service Providers & MSSPs Radware’s Advanced SolutionCustomer CasesSummary Slide 2

3. DDoS is growing and evolving

4. DDoS Threat is growingSlide 4Attack sizeOperation Sony DDoSOperation Payback II on Codero; Netbot DDoS on Wordpress.comOperation payback – Wikileaks revenge DDoS attacksJuly 2009 cyber attacks (US and south korea)IMDDOS – Commercial BotnetSlowloris - Low & Slow AttacksTwitter DDOS attack on CyxymuTime200920112010Source: Radware ERT report

5. When you have no Anti-DoS solution in place…Slide 5Wikileaks site outageWestboro Baptist Outage4 sites held down for 6 days

6. Poll questionHow many DDoS attacks did you (or your customer) face in the past year?NoneOnly onceFew timesMany timesI don’t have the tools to detect DDOS attacksSlide 6

7. Multi-Vulnerability Attack CampaignsSlide 7Large volume network flood attacksConclusions Attackers use multi-vulnerability attack campaigns making mitigation nearly impossible

8. Even if one attack vector is successful – the business is severely impactedLarge volume SYN floodLow & Slow connection DoS attacksBusinessSlow Application flood attack (Slowloris)Application flood attack (HTTP data flood)BUSINESSIMPACT

9. DDoS Protection: layers of defenseSlide 8Type of DoS attacks:PPS & Bandwidth flood attacksConnection & application flood attacksDirected application DoS attacksHighMedAttack volume:LowChallenges:PPS Processing capacity

10. Bandwidth capacity

11. Identify malicious sources

12. Accurate mitigation – all sessions are legitimate

13. Deep packet inspection

14. Ad-hoc filters creation

15. Accurate mitigation – maintain very low false positives

16. Time to protectKey criteria to become a successful MSSP

17. What drives the MSSP success? (1 of 2)BusinessTrue DDoS ProtectionCan you detect and protect emerging DDoS attacks including multi-vulnerability campaign attacks and slow DDoS attacks?How fast can you detect and protect against attacks? In seconds? In minutes?FinancialSolution scalabilityCan your infrastructure grow without painful forklift upgrades?How do you price your service?Monthly feeOn demand / per incidentSLA penalties / rewardsSlide 10

18. What drives the MSSP success? (1 of 2)Technical Flexible deploymentFit any customer architectureOperationalCustomer centric reportingEasy integration into provider environment (OSS, SEM, SOC)MarketingWhat is unique in your offering?SLA: can you guarantee Time to protect?Coverage – what type of attacks do you protect, and what you don’t?Multi locations vs. single locationCustomers portfolio and testimonialsSlide 11

19. Radware solution for DDoS service providers

20. DDoS Protection: Radware coverageSlide 13Radware DDoS Protections:PPS & Bandwidth flood attacksConnection & application flood attacksDirected application DoS attacksASIC-Based DoS Mitigator Engine (DME)Real-time signatures technologyMulti-core CPUsReal-time signatures & challenge -response technologiesStringMatch Engine (SME) RegEx EngineStatic & user filtersUp to 12MPPS of attack preventionUp to 800K new TPS of HTTP Challenge-ResponseFull 10Gbps DPI (RegEx) processing

21. DDoS Protection: Radware technologiesSlide 14PPS & Bandwidth flood attacksConnection & application flood attacksDirected application DoS attacks Behavioral based real-time signatures blocking

22. SYN Protection (SYN cookies; Web cookies)

23. Rate based protections

24. HTTP & DNS advanced Challenge –Response techniques

25. Behavioral based real-time signatures

26. Rate based protections

27. Auto-updated RegEx filters

28. Counter attack techniques

29. Ad-hoc filters

30. Widest DDoS attacks coverage out-of-the-box