한국정보통신 로고

sub visual sub visual sub visual sub visual sub visual sub visual sub visual sub visual sub visual sub visual

Ddos

AhnLab TrusGuard DPX

Combined with DDos Protection Technology, Experience and Expert

* Provide integrated process for DDoS attack protection

* DDoS proactive technology acquired a patent

* Unknown HTTP DDoS attack defense

AhnLab TrusGuard DPX, as AhnLab’s special DDoS defense process, comprehensively responds to the changes of DDoS attack paradigm.
DDoS(Distributed Denial Of Service) attacks, which paralyzes service operations, are increasingly changed into the form of seeking financial benefits and becoming a powerful means of attack to threat the IT infrastructure of organization, such as enterprises. Particularly, in the example of the 7.7 DDoS crisis in 2009 and 3.4 DDoS attack crisis in 2011, intelligent attacks using massive zombie computers are attempted, so DDos defense is expected more difficult. Also, DDoS attack targets are indiscriminately chosen from small and medium-sized companies to large Internet service providers, institutions, portal, game companies, and the main government institutes. AhnLab TrusGuard DPX is a new DDoS attack defense dedicated product combining security technology for defense to more and more sophisticated & intelligent DDoS attacks with AhnLab’s security infrastructure. TrusGuard DPX (DDoS Prevention eXpress) provides superior DDoS attack defense features, minimizing false positives with using multi-step filtering structure and automatic learning policy. Also, it provides the fast DDoS attack response process interlocking with AhnLab’s malignant code analysis system. TrusGuard DPX segments policies by traffic types according to each network environment, and enables to automatically learn. It ensures the most of normal traffics through accurately determining the attack traffic via segmented policies for preventing false positives and technologies for detecting zombie PCs. To separately calculate the threshold per the maximum N source IP by segmented policies, it provides the differentiated feature that allows minimizing false positives as IP units with NAT during DDoS attack defense. In addition, it can completely defense the session-based attacks (TCP/HTTP) most frequently occurring lately, as well as DDoS attacks of the typical form, such as Spoofed-based Flooding & Flooding by fragmentized packets. TrusGuard DPX separates the attack zones and non-attack zones firstly to minimize the network damages and stably operate the network. Especially, TrusGuard DPX supports configurations suitable for a variety of network environments, with providing Out-of-Path configurations as well as inline configurations.
Division Attacks whether blocking
TCP
Packet
Syn Flood
Syn-Ack Flood
Ack Flood
Push-Ack Flood
Fin/Fin-Ack Flood
Rst/Rst-Ack Flood
Urg Flood
Xmas Flood
TCP Fragmentation
Session-based TCP TCP Flood
TCP Multi-Connection
TCP Established Attack
UDP UDP Small Size Flood
UDP Large Size Flood
UDP Fragmentation
ICMP ICMP Small Size Flood
ICMP Large Size Flood
ICMP Fragmentation
HTTPDDoS
attack
HTTP Get Flood
HTTP Null Page Flood
HTTP CC Attack
HTTP Slow Attack
HTTP Refresh Flood
HTTP Dynamic Query
HTTP Based SQL Attack
IE Based HTTP Flood Tools
▶ Inline & Out-of-Path
AhnLab TrusGuard DPX supports Inline configurations and Out-of-Path configurations spontaneously.
* able to select the suitable configuration way according to network type (Out-of-Path License)
* provide 1G/10G interface embedded with Bypass (based on TrusGuard DPX 6000)
* provide the same attack defense feature for both In-Path and Out-of-Path (including HTTP verification feature)
* able to process massive DDoS traffics via cluster configuration

▶New kind attack protection & False positives minimizing
AhnLab TrusGuard DPX provides features of False positives minimizing & protection for new kind HTTP attacks, which are impossible to response with the existing threshold methods only.
* able to select the suitable configuration way according to network types (Out-of-Path License)
* provide 1G/10G interface embedded with Bypass (based on TrusGuard DPX 6000)
* provide the same attack defense feature for both In-Path and Out-of-Path (including HTTP verification feature)
* Able to process massive DDoS traffic via cluster configuration

▶ Mobile Monitoring
AhnLab TrusGuard DPX provides monitoring via mobile devices
* able to check real-time DDos attack condition via main mobile devices, such as smartphone and tablet PC.
* The attack defense condition per filter is provided with intuitive monitoring UI(User Interface)
Division TrusGuard DPX 2000 TrusGuard DPX 6000 TrusGuard DPX 10000
Standard proposal performance 2Gbps 6Gbps 10Gbps
Maximum equipment performance 4Gbps 10Gbps 20Gbps
CPU dedicated multi-core dedicated multi-core dedicated multi-core
Memory 2GB or 4GB 4GB or 8GB (up to 16GB) 16GB
Flash Disk 2GB or higher 2GB or higher 2GB or higher
OS Built-in OS Built-in OS Built-in OS
Power redundancy / FAN redundancy O / O O / O O / O
Interface Mgmt Port 1EA 2EA 2EA
1G Copper 4EA - -
1G Fiber (SFP) 4EA 4EA (up to 6EA) -
10G (SFP+) - up to 6EA up to 8EA
Bypass built-in O O O
Certificate CC Certificate O O O
Other registrations O O O
▶ Adoption Effect1
Experience Total Care Process for DDos attack defense from advanced prevention to Operating Process with AhnLab TrusGuard DPX

▶ Adoption Effect2
Experience AhnLab ‘s special complete DDoS defense process with AhnLab TrusGuard DPX
Current DDoS attacks cannot be blocked with simply dedicated products any more. At the 7ㆍ7 DDoS crisis in 2009 and 3ㆍ4 DDoS attack defense in 2011, AhnLab surprised the whole world with complete DDoS defense process. With TrusGuard DPX, DDoS dedicated equipment, you will have safe business environment from DDos Attacks, via security expert organization, security control service and security consulting as well as TrusGuard DPX, which is DDoS dedicated equipment.

한국정보시스템 로고

22, Gukhoe-daero 70-gil, Yeongdeungpo-gu, Seoul(150-871 Geumgang Bldg. 8F, Yeouido-gu)  TEL : +82-2-2162-1000  FAX : +82-2-2162-1009
Branch Address : 66,210 Dunsanjung-ro, Seo-gu, Daejeon  Branch Tel : +82-42-485-0788  Branch Fax : +82-42-485-0784
www.kis.co.kr  CEO : Won Bae Jeon   Main Businessman registered number: 107-88-02893  Branch Businessman registered number : 314-85-51763
Copyright (C) 2014 KIS All Right Reserved.