Denial of Service - DDoS Protection

Thwart DoS Attacks Before They Reach Your Network

What is DDoS? Sophisticated hackers use the Internet to launch denial of service (DoS) attacks against your Web environment. And today's attacks are no longer isolated to one point of entry. They usually span many network entry points, or vectors. Hackers often use multiple compromised PCs to act as zombies and zombie armies called botnets, to forward spam, viruses and other malware onto your network.

If successful, this activity creates large-scale distributed denial of service (DDoS) attacks that generate multiple gigabits-per-second of traffic. Such loads quickly clog your access network and deny service to legitimate users, severely undermining your business and revenues.

AT&T DDoS Defense, an optional feature to the AT&T Internet Protect malware-monitoring service, uses powerful, specialized devices running sophisticated algorithms to identify attacks headed toward your network. We can mitigate them before they reach your network to keep your critical infrastructure running.

Avoid upfront DDoS mitigation costs

Battling multi-vector denial of service attacks requires a full array of mitigation tools and security expertise, which could cost you millions to set up internally. As the network service provider delivering and managing your traffic, AT&T already has these resources in place.

More than 1,500 security experts in our Security Operations Center (SOC) are armed with the latest tools to monitor petabytes of IP traffic every day, 24x7, for suspicious activity. With years of experience, they know how to identify genuine attacks and can avoid bogging you down with "false positive" alerts.

Get more value from your network with DDoS Protection

Monitoring, analyzing and correlating security events require large amounts of extra bandwidth. Instead of paying for that capacity yourself, it may be more cost effective to turn over DDoS protection to a large-scale service provider partner.

With AT&T taking on the capacity-heavy job in its own backbone, you avoid paying for more bandwidth each month just to accommodate "bad" traffic. Mitigating DDoS attacks early keeps your network open and productive.

Denial of Service: Improve business uptime with DDoS Defense

AT&T DDoS Defense protection rapidly identifies the sources and attributes of any suspicious transactions, including the newest threats. We can adapt the network behavior to mitigate their effects while valid traffic continues to be delivered, as usual, to your access router. So business continues as normal.

In short, AT&T empowers your organization to:

• Defend against Web-based attacks to boost business continuity
• Automatically identify and remove only attack traffic without interrupting legitimate business traffic
• Take a proactive stance toward protecting your network against malicious intruders and unauthorized activities

DDoS Considerations

If your organization depends on Internet-facing applications for sales and revenue, you need that channel open and available as much of the time as possible. Should your resources become inaccessible, you immediately lose revenue or generate excessive cost. When deciding how to mitigate DDoS attacks, consider:

Can you afford an outage?

Depending on your type of business, you likely can't afford to be down for long. Calculate the cost to your business of a minute, hour or day of Web downtime and compare it to the price of a monthly service to prevent an outage. Which is most cost-effective?

DDoS attacks are growing in number, size and intensity. How can you manage them?

It's expensive and complex for most organizations to acquire and maintain the ever-changing tools, updated threat databases and evolving expertise required to identify and mitigate new attacks. However, in a global, network-centric organization such as AT&T, we maintain the technology, scale and highly skilled expertise needed to do the job.

Are you already using a managed firewall service enhanced with intrusion protection capabilities?

Some firewall services provide additional security services beyond access control. Check whether you are already running such services and, if so, whether they support DDoS protection.

Design Your DDoS Solution

AT&T will set up your DDoS service and test it before going live. All that's required is that you specify the IP address range that needs protection. We can also bring up the service in emergency situations when necessary to curtail the impact of an attack.

A technical design expert from AT&T will contact you to design a plan to:

• Meet your internal security policy needs
• Provide you with a solution tuned to your business
• Deliver the level of reporting that you require

DDoS Service Delivery

All it takes is for you to complete a technical provisioning document that tells us the IP address and subnet addresses you would like protected on your network. AT&T technical staff verifies this information and the connections and then begins monitoring your traffic.

AT&T provides a one-stop-shop for network service delivery and DDoS protection, simplifying your operations and supply chain structure.

DDoS Customer Support

AT&T supports your service in an individualized, flexible way to meet your needs. AT&T can take immediate action on an anomaly we discover, or simply contact you to receive remediation direction before we take action.

As part of the DDoS service, AT&T will conduct two yearly mitigation tests to verify operations at no extra charge. This helps ensure that we're up to date on any organization, personnel or IP address changes that might affect our ability to contact you or monitor the complete spectrum of IP address space you require.

Open trouble tickets by sending an email to threat@att.com or by calling 800-727-2222 / 919-474-1505, Prompts: 8, 7

Existing AT&T Enterprise customers can work with their AT&T sales representative to get started with AT&T DDoS Defense. Having the AT&T Internet Protect service is a prerequisite to using AT&T DDoS Defense.