GenieATM

NOMINATION HIGHLIGHTS

GenieATM is a carrier-grade DDoS protection platform purpose-built to defend large-scale networks against today’s high-volume, multi-vector, and hybrid attacks. Its architecture is based on a distributed collection of IP flow telemetry from routers and switches across the entire network, coupled with a centralized detection engine that performs real-time cross-link correlation and behavioral analysis.

Unlike inline appliances that must inspect every packet and struggle with encrypted traffic and backbone-scale throughput, GenieATM relies on flow-level analytics to achieve pervasive visibility without placing devices on every perimeter link. The platform continuously models normal traffic behavior using machine-learning techniques such as ARIMA time-series forecasting, while monitoring multiple dimensions including bits per second (bps), packets per second (pps), flows per second (fps), and IP-address entropy. These combined metrics allow GenieATM to identify sophisticated campaigns, such as reflection-amplification floods and hybrid attacks orchestrated through botnets and encrypted command-and-control channels—within seconds, with reduced false positives and false negatives.

When anomalies exceed learned baselines or configured thresholds, GenieATM automatically activates mitigation. Supported actions include BGP blackholing, FlowSpec traffic shaping, and diversion of suspicious traffic to out-of-path (OOP) scrubbing centers, where malicious packets are removed before clean traffic is re-injected to its destination. Operators receive real-time mitigation statistics and reports through the GenieATM interface, enabling precise situational awareness during live incidents.

The OOP architecture also delivers measurable economic value: detection is performed by high-capacity flow collectors rather than inline appliances, and scrubbing resources are shared dynamically among protected customers, lowering capital expenditure while maintaining network-wide coverage. GenieATM further enhances protection by analyzing heterogeneous network data and distributing updated threat intelligence, such as botnet and C&C indicators through Genie’s cloud services, ensuring coordinated defense across geographically dispersed deployments. For deeper investigation, GenieATM forwards incident data to GenieAnalytics, enabling extended forensic analysis.

By combining network-wide flow telemetry, machine-learning-driven baselining, IP-entropy analysis, and automated out-of-path mitigation, GenieATM delivers resilient, large-scale protection against modern DDoS campaigns. These capabilities position GenieATM as a leading solution for carrier-grade DDoS protection.