GenieATM6000产品介绍.pptVIP

* * * * * * 2. 我們內建 template pattern, 可以偵測已知的DoS/DDoS網路攻擊, 也研發了能夠發現 Zero-Day Attacking 未知網路攻擊的策略 並且使用dynamic baseline機制, 讓系統動態的學習正常流量的基準點 3. 另外新一代GenieATM為了提昇效能, 在架構的設計更加的優越. 同時在也允許客戶以多種方式去擴充他的儲存設備 * * * * * * * More to be added… * 建華證券, 日盛證券, 國泰人壽, 中國銀行, 新竹國際商銀 台電, * * * * * * * * * * * * * * * * * * * * * * * * * Announcement via BGP * * Announcement via BGP * * * * * * * 实现联动方式 Black Hole Honey Pot Juniper Flowspec Passive Clean Center Active Clean Center Auto-Mitigation Black Hole Drop traffic to the Null Route Regional Network Regional Network GenieATM Detect Anomaly Traffic from NetFlow 1 BGP announcement 2 ip route 192.1.1.2 255.255.255.255 Null0 3 3 ip route 192.1.1.2 255.255.255.255 Null0 ATTACKER VICTIM 192.1.1.2 Honey Pot Route traffic to the Honey Pot Regional Network Regional Network GenieATM Detect Anomaly Traffic from NetFlow 1 BGP announcement 2 ATTACKER VICTIM 192.1.1.2 ip route 192.1.1.2 255.255.255.255 192.250.2.2 3 3 ip route 192.1.1.2 255.255.255.255 192.250.2.2 Honey Pot 192.250.2.2 综合的解决方案 2: 启动 flow-specific 传播 Regional Network Regional Network GenieATM Protected Network Zone1 Propagate flow-spec routes via BGP announcement Enable flow-spec routing propagation Detect Anomaly Traffic from NetFlow Drop 1 2 3 4 Drop 3 Juniper Juniper Juniper 4 Regional Network Regional Network Clean Center 1 GenieATM Protected Network Zone1 Detect Anomaly Traffic from NetFlow 1 5 Inject Clean Traffic Passive Clean Center Multiple Clean Centers ATTACKER VICTIM 192.1.1.2 Traffic routed to another router 4 BGP announcement 2 Clean Center 2 BGP announcement 3 4 5 Regional Network Regional Network Clean Center GenieATM Protected Network Zone1 Detect Anomaly Traffic from NetFlow 1 Passive Clean Center How Load Balance Works ATTACKER VICTIM 192.1.1.2 Inject Clean Traffic 5 Protect zone 192.1.1.0/24 Protect zone 192.1.1.0/24 Protect zone 192.1.1.0/24 Enable multi-protection 2 Traffic routed to Guard devices 4 自动防护连动机制 (Auto-Mitigation) 支持自动防护 可在异常事件发生时，自动与路由