cisco企业ddos安全防护解决方案.pdf

CISCO DDoS MITIGATION
ENTERPRISE SOLUTIONS
February 15, 2005
Cisco DDoS Mitigration
Enterprise Solutions © 2005 Cisco Systems, Inc. All rights reserved. 1
Integrated Security
Foundation for Self-Defending Networks
PRIVACY PROTECTION CONTROL
Secure Threat Defense Trust and Identity
Connectivity System Management
System Collaboration of System
Secure transport security and network Contextual identity
of applications intelligence services management for
across numerous to minimize impact of policy enforcement,
network both known and network entitlement,
environments unknown threats and trust
Management and Analysis
Cisco DDoS Mitigation
Enterprise Solutions © 2005 Cisco Systems, Inc. All rights reserved. 2
Executive Summary
• Detects AND MITIGATES the broadest range
of distributed denial of service (DDoS) attacks
• Has the granularity and accuracy to ENSURE
BUSINESS CONTINUITY by forwarding legitimate
transactions
• Delivers performance and architecture suitable
for the LARGEST ENTERPRISES AND PROVIDERS
• Addresses DDoS attacks today, and its NETWORK-
BASED BEHAVIORAL ANOMALY CAPABILITY will
be extended to additional threats
Cisco DDoS Mitigation
Enterprise Solutions © 2005 Cisco Systems, Inc. All rights reserved. 3
DDoS Vulnerabilities
Multiple Threats and Targets
Attack ombies:
. Use valid protocols
. Spoof source IP