Overview of Radware's Attack Mitigation System, and particularly focused on DefensePro for Ddos Security

1. ….the most effective Attack
Mitigation System
•A Short intro to
AMS and
DefensePro

2. Mapping Security Protection Tools
DoS Protection
Behavioral Analysis
IPS
IP Reputation Large volume network flood attacks
WAF Network scan
Intrusion
SYN flood
“Low & Slow” DoS attacks
Port scan
Brute force attack
Intrusion, Malware
High & Low rate application DoS attacks
Web application attacks
(e.g. XSS, Injections, CSRF)
Slide 2

3. Introducing Radware Attack
Mitigation System

4. AMS Protection Set
DoS Protection
• Prevent all type of Reputation Engine
network DDoS attacks • Financial fraud
protection
• Anti Trojan & Phishing
IPS
• Prevent application
vulnerability exploits
NBA
WAF
• Prevent application
• Mitigating Web resource misuse
application threats
• Prevent zero-minute
and zero-day attacks
malware
Slide 4

5. OnDemand Switch: Designed for Attacks Mitigation
DoS Mitigation Engine
• ASIC based
• Prevent high volume attacks
• Up to 25 Million PPS of attack protection
IPS & Reputation Engine
• ASIC based String Match
& RegEx Engine
• Performs deep NBA Protections & WAF
packet inspection
OnDemand Switch
Platform Capacity up
to 40Gbps (10, 20, 30,
& 40Gbps Available)
Slide 5

6. Designed to Perform Under Attack
Other Solutions handle
Attack traffic does
attack traffic at the
not impact legitimate
expense of legitimate
25 Million traffic
PPS
traffic!
Attack
Traffic
Attack
Attack
Multi-Gbps Multi-Gbps
Capacity Capacity
Attack
Legitimate Legitimate
Traffic
Traffic Traffic
+ Attack
DefensePro Other Network Security Solutions

7. DefensePro Layers of Defense
DME Multi Purpose Multi Cores CPU’s L7 Regex
DDoS Mitigation Engine Acceleration ASIC
(Up to 40 Gbps)
(25M PPS)
& Reputation Engine
Behavioral-based protections
Hardware Architecture – Tailored for Attack Mitigation
Slide

8. Radware AMS & ERT/SOC
• Security Operations Center (SOC)
– Provides weekly and emergency signature updates
– Maintains on-going application vulnerability protection
• Emergency Response Team (ERT)
– Provide 24x7 service for customers under attack
– Neutralize DoS/DDoS attacks and malware outbreaks
Slide 8

9. Radware Security Products Portfolio
DefensePro
Network & Server attack prevention device
AppWall
Web Application Firewall (WAF)
APSolute Vision
Management and security reporting &
compliance
Slide 9

10. PayPal proof
Slide 10

11. Thank You
www.radware.com