Defending the Realm: New Frontiers in DDoS Mitigation

Distributed Denial of Service (DDoS) attacks aren’t just bigger than ever — they’re faster, more complex, and increasingly automated. At BalticNOG 2025, José Alberto Nistal, Consulting System Engineer & Regional Product Line Manager at Nokia Deepfield, will discuss how service providers can defend their networks against these evolving threats.

The Shifting Threat Landscape

Nokia’s recent threat intelligence shows how attack patterns are changing: DNS amplification, botnets with millions of active nodes, residential proxy abuse, and short, rapid-fire attack bursts are all on the rise. Operators are being tested on both scale and speed.

The Limits of Legacy Detection

Traditional DDoS defenses often rely on flow-based thresholds, flagging traffic only once it exceeds predefined limits. This reactive model exposes operators, forcing them to tune parameters and constantly chase the latest attack vectors. José will explain why this “good until it isn’t” approach no longer works.

Automation, Speed, and Scale

Modern DDoS defense must be automated, lightning-fast, and scalable. José will introduce how Deepfield’s Defender platform combines real-time telemetry with a massive internet “genome” of traffic patterns to detect and mitigate attacks in near real time — hinting at how service providers can integrate these capabilities without slowing down their operations.

🎟️ Get your ticket: Register here
📖 Explore the program: Full agenda
✈️ Plan your trip to Vilnius: Travel details