Neustar SiteProtect NG: DDoS Protection Overview and Analysis

See our complete list of top DDoS vendors.

Company Description

For over 20 years, Neustar has offered performance monitoring, managed DNS and distributed denial of service (DDoS) defense solutions. Originally part of Lockheed Martin, it divested in 1999 and is now privately held.

Product Description

Neustar SiteProtect NG offers both on-premises and cloud options. With 4 Tbps of capacity (increasing to 10 Tbps over the next few months), its cloud-based DDoS protection service scrubs malicious traffic to defuse large and complex attacks. It can put countermeasures in place to limit exposure, protect a site’s uptime and preserve a brand’s reputation. Neustar provides automated mitigation across multiple attack vectors. It recently launched an integrated Web application firewall (WAF) solution that works in tandem with its cloud DDoS mitigation.

“Research shows cybercriminals have adapted their attack strategies and are now executing more targeted strikes on a brand’s entire network by taunting defenses and probing network vulnerabilities,” said Nicolai Bezsonoff, vice president and general manager, Neustar Security Solutions.

Markets and Use Cases

Financial services, technology, large ecommerce, retail, utilities, gaming

Metrics

Neustar is currently capable of absorbing and defending attacks of greater than 4 Tbps. By year’s end it will grow that number to 8 Tbps, and 10 Tbps by Q1 of 2019. Its average time to mitigate is under 90 seconds.

Intelligence

Neustar’s security operations center (SOC) utilizes a combination of threat analytics based on its DNS footprint (10 percent of authoritative DNS passes through Neustar), plus external threat feeds. It also monitors hacker forums/IRCs, social media and other intelligence sources to maintain awareness of developing threats. Its SOC makes use of real-time packet capture and deep packet inspection to spot anomalous trends and craft very granular mitigations to drop only the undesirable traffic.

Delivery

Cloud-based with on-premises hardware options that can also provide hybrid DDoS protection and a web application firewall in its always-on (always routed or always proxied) configurations.

Agents

No agents used.

Pricing

Neustar offers pricing based on the level of risk rather than the traditional pay-per attack.