10G PLATFORM
Transparent Security
Delivering network security with transparent protection at the endpoints.
What is Transparent Security?
Transparent Security is a solution that identifies DDoS attack traffic and mitigates the attack at the customer premises or in the access network. This solution leverages a programmable P4-based data plane to add in-band network telemetry (INT) for device identification and in-band mitigation. P4 is an open-source programming language that lets end users dictate how networking gear operates.
Why is Transparent Security important?
As increasing numbers of devices connect to the network, there are more vulnerable points of attack for malicious actors. DDoS attacks cost the industry billions of dollars each year in malicious traffic delivery costs, traffic scrubbing and service downtime. The ability to quickly identify impacted devices and packets reduces malicious traffic delivery expenses for operators, service interruptions for consumers and costly mitigation efforts further in the packet lifecycle.
Typical DDoS mitigation solutions are deployed only at the interconnection points with other networks. This means that they do not protect the network from internal DDoS attacks, and they can also allow networks to be weaponized. Transparent Security can monitor ingress and egress traffic at every point in the network, from the customer premises to the core of the network. This allows operators to quickly identify the local network from which the traffic originates instead of identifying a service area that could include hundreds of devices—which may or may not be impacted by the attack.
Related Resources
Specification
In-band Telemetry Specification
Specification
V2.1 Telemetry Report