In this demo, we highlight the capabilities of our Nokia Broadband Network Gateway (BNG) and Multi-Access Gateway, integrating the Nokia Deepfield solution for enhanced subscriber insights and Distributed Denial of Service (DDoS) attack mitigation.
Using a CUPS (control and user plane separation) architecture, the demo handles both synthetic and live traffic, focusing on attacks targeting e-commerce websites through internal subscribers (from a service provider network) or IoT devices.
The demo simulates a DDoS attack on an e-commerce website using a distributed TCP SYN flood and botnet attack. Deepfield Defender detects the attack and implements countermeasures using NETFLOW or BGP FlowSpec, populating filter rules on the user plane (on the broadband gateway) and ensuring minimal disruption to services and customers.
Deepfield Secure Genome identifies vulnerable IPs and known botnets, providing context to anomalous traffic patterns for precise detection and mitigation.
The demo emphasizes Nokia’s scalable, cost-effective DDoS solution, supporting various access technologies and leveraging FP4 and FP5 network processor technology embedded in Nokia service routers for enhanced performance.
This demonstration reinforces Nokia's commitment to delivering the world's most secure broadband edge. For more information, please visit the Nokia website.
The demo was presented at the Nokia SReXperts EMEA 2024 conference (June 4-6, Palma, Spain).