|
|
As an "inline" device, Barbican RNP is designed to deliver on two key purposes:
- Inspect every single packet and packet stream for validity, to identify invalid traffic and threats, and discard and report on such identified "bad" traffic
- No impact on valid traffic and no introduction of latency due to real-time inspection, so normal operations are guaranteed
In order to deliver the desired benefits, Barbican RNP protects against these attacks:
Connection flood attacks:
The attacker exhausts the target's resources by creating a large number of unused connections to the target.
SYN flood attacks:
The attacker exhausts the target's resources by starting a large number of connection "handshakes" that it never finishes.
Malformed header attacks (TCP, UDP, ICMP):
The attacker attempts to take down, take over or degrade the performance of a target by sending packets whose headers contain invalid data.
Packet fragmentation attacks (TCP, UDP, ICMP):
The attacker attempts to take down the target using packets deliberately crafted to take advantage of faults in certain operating systems or network devices.
Random-source UDP flood attacks:
The attacker consumes the target's network resources by originating a large number of UDP datagrams that appear to come from random origins.
TCP State Machine attacks:
The attacker attempts to take down or degrade the performance of a target by performing protocol actions out of expected order, or in ways that "confuse" the target device's network communication system.
Malformed TCP packet attacks:
The attacker attempts to take down, take over or degrade the performance of a target by sending packets that contain various kinds of invalid data.
These attacks can be geared against specific network devices, operating systems, applications (forinstance: web servers, E-Mail servers, DNS, Voice-over-IP telephony services, infrastructure services such as BGP4) in either broad-scale attacks, overwhelming services or bandwidth pipes, or specifically targeted against known or emerging vulnerabilities.
The determination of vulnerabilities specific to each targeted site and infrastructure is prevented by the Barbican RNP Penetration Testing Defense (PenTest), which "cloaks" the infrastructure against probing attacks.
In the initial v1.0 release, Barbican RNP is geared to protect against OSI Layer 2 and 3 attacks; however, many attacks targeting applications on OSI Layer 4 and above can be recognized and thus defended against on the lower levels. Melior has several modules in development, addressing CyberWarfare Defenses against OSI Layer 4 and above attacks, which will become available for easy installation on existing Barbican RNP platforms by the customer.
Barbican RNP can be deployed across the entire network infrastructure, to defend against external and internal threats. The Barbican RNP product is purposely priced very aggressively, to make wide-spread CyberWarfare Defense affordable to deploy
- At data center locations to protect your online presence
view graphic,
download brochure
- At the external perimeter to protect against external threats
view graphic,
download brochure
- At internal network connection points between LAN subnets and between LANs and WANs, to protect against spreading attacks from contaminated PC desktops by containing contamination within local subnets, and to protect against bandwidth saturation on WAN links
view graphic,
download brochure
 |
 |
 |
(Click on the picture for the full-size Pop-Up) |
Competitive Overview
The recognition of dDoS- and other CyberWarfare threats is universal across all security personnel, and those responsible for preventing the impact of such attacks (Government and corporate executives). Since the Internet "root server" attacks on October 21st and 22nd, 2002, subsequent dDoS extortion attacks on entire industries, and the expected next escalation level feared to be motivated by political (terrorist) motivations, defense capabilities have become a high priority.
Everyone interested in Barbican RNP and Melior's CyberWarfare Defense solutions is likely to also look at the claims of many other vendors claiming such defense capabilities. While Melior remains at this time (January 2005) the only dDoS CyberWarfare Defense company able to prove successful defenses against real dDoS attacks (over 300 million users protected), there are few other products in the emerging dDoS market suitable to compare against.
While many vendors add "dDoS defense" capabilities to their marketing brochures without validity, or claim one form or another of "deep packet" analysis, no other technology is specifically geared to detect and defend against the carefully crafted compromise of network devices; and in most cases, are vulnerable themselves against such attacks.
Melior encourages to compare Barbican RNP against any other product in a lab environment test bed or in live production
(or see our testimonials and track record).
In the following competitve analysis against the Cisco (formerly Riverhead) "Guard XT" product, we provide you with a matrix of issues to compare features:
|
|
|