Arbor Networks

ATLAS: Delivering Real-Time Business Intelligence
In partnership with its service provider customers, Arbor Networks launched ATLAS in February 2007, creating the world's largest distributed darknet sensor network. For Arbor customers, ATLAS delivers a globally scoped view of malicious traffic traversing the backbone networks that form the Internet's core. With this unique vantage point, Arbor is better positioned to deliver intelligence about malware, exploits, phishing and botnets than any other entity.

Today, ATLAS is a collaborative effort with 100+ service providers, distributed globally across 17 countries. These providers have all agreed to share anonymous security, traffic and routing data on an hourly basis – leveraging Arbor’s technology that sits on their networks – together with data from Arbor’s darknet monitoring probes. ATLAS also includes a number of third-party data feeds. No other vendor can deliver the combination of micro- and macro-level visibility as Arbor Networks.

Pioneering Cross-Provider Collaboration
To date, Arbor has successfully launched the Fingerprint Sharing Alliance (FSA), a first-of-its-kind industry initiative aimed at helping network operators share Internet attack information automatically; and the annual Worldwide Infrastructure Security Report, which provides practical data to network operators so that they can make informed decisions about the use of network security services technology to protect their mission-critical infrastructure.

With ATLAS, Arbor has once again raised the bar for inter-provider communication and collaboration by extending the information beyond security-related events to include real-time global traffic and routing information. Through their Peakflow SP and eSeries deployments, participating ISP customers are sharing anonymized data about their networks that is aggregated into the ATLAS system, analyzed by Arbor’s world-renowned Internet and network security research team and then shared back among Arbor customers. No other organization today has either aggregated this much real-time information about what is happening across the Internet or developed the means for cross-provider collaboration that informs numerous business decisions.

Arbor Networks Customers Have Competitive Advantage
Arbor customers enjoy a competitive advantage because of the depth and breadth of real-time information delivered via ATLAS. The ATLAS data set also powers Arbor’s cloud-based services, from the Active Threat Feed security detection mechanisms to Routeviews, which deliver Internet-wide routing knowledge.

The data gathered from ATLAS impacts a number of key decisions including network security, service creation, market analysis, capacity planning, application trends, transit and peering relationships, and potential content partner relationships. From a security perspective, this comprehensive insight, intelligence and collaboration enable service providers to fight back against the scourge of botnets, denial of service attacks and other malicious Internet activities that have such negative consequences for their networks and business operations.

ATLAS is the world’s most comprehensive Internet Monitoring System
Because of Arbor’s status as a trusted partner to the service provider community, ATLAS is now the world’s most comprehensive Internet monitoring system.

• Over 3 Terabits per second of Internet transit traffic monitored and reported
• 1 million+ unique IPv4 Internet addresses monitored for globally routed dark
  IP addresses
• 31 GB of daily global darknet traffic is analyzed daily
• Global dark IP route coverage is spread across North America, Europe and Japan
• 75+ ISPs are sharing all real-time attack data with Arbor
• 30+ ISPs are sharing full real-time routing data
• 55 ISPs are participating in the Fingerprint Sharing Alliance (FSA)

ATLAS Security Portal
Arbor Networks makes a subset of the intelligence derived from the ATLAS sensor network available to the public via the ATLAS Security Portal. The ATLAS Security Portal includes host/port scanning activity, zero-day exploits/worm propagation, security events, vulnerability disclosures and dynamic botnet/phishing infrastructures.

The portal also includes:

• Global Threat Map: Real-time visibility into globally propagating threats
• Threat Briefs: Summaries for the most significant security events within the past 24 hours
• Top Threat Sources: A view of originating attack activity, based on country, ASN or host
• Threat Index: A summary of malicious activity traversing the Internet on that date
• Top Internet Attacks: A 24-hour snapshot of the major exploits launching attacks globally
• Vulnerability Risk Index: The most dangerous vulnerabilities being exploited on the Internet today