Cisco流量异常检测和防护解决方案.pdfVIP

PRODUCT BULLETIN CISCO TRAFFIC ANOMALY DETECTION AND MITIGATION SOLUTIONS Cisco traffic anomaly detection and mitigation solutions deliver the industrys most complete and powerful family of solutions for detecting and defeating complex, sophisticated DDoS attacks. Internet attacks such as distributed denial of service (DDoS) pose a serious threat to any business with an online presence. DDoS attacks paralyze Websites by overloading servers, links, and network devices with malicious, unsolicited traffic. They can quickly overwhelm an organization, blocking legitimate transactions and preventing users—whether customers trying to complete an online purchase or employees attempting to access an internal enterprise resource planning (ERP) system—from performing mission-critical operations. Easily launched using readily available tools, DDoS attacks are costing businesses millions of dollars a month in lost revenue, compromised productivity, and tarnished reputations. Cisco® DDoS detection and mitigation solutions, developed by Riverhead Networks (acquired by Cisco Systems in March 2004), detect the presence of DDoS attacks and identify and block malicious traffic in real time—without affecting the flow of legitimate, mission-critical transactions. As a result, the business operations of targeted organizations can continue running, even while under attack, making sure that critical corporate assets are always protected. The Cisco DDoS family includes two different products, both of which deliver multigigabit performance for protecting the largest enterprise and service provider environments from the highest-volume, most sophisticated attacks: Cisco Traffic Anomaly Detector XT 5600—The Cisco Traffic Anomaly Detector XT 5600 detects DDoS, worm, and other attacks, and reports on their characteristics. Detection is based on sophisticated anomaly detection capabilities that compare activity to profiles of known “normal” behavior, enabling the Cisco Traffic