Nokia introduced Deepfield Genome Shield, a new security automation platform designed to provide proactive, always-on DDoS protection for service providers, hosting companies, internet exchange points, and cloud operators. The company said the solution addresses a new generation of AI-driven cyber threats and residential proxy botnets that can generate multi-terabit attacks lasting only seconds or minutes, often rotating across thousands of compromised devices.
Genome Shield extends Nokia’s Deepfield Defender platform by shifting protection from traditional reactive mitigation to proactive network-wide enforcement. Nokia said the platform continuously aggregates threat intelligence from multiple sources, including its Secure Genome database, which monitors more than five billion internet endpoints, Global DDoS Threat Analytics telemetry, and a dedicated cyber range used to analyze malware and botnet command-and-control infrastructure. The resulting intelligence is automatically translated into network-wide security policies that can block threats before attacks begin.
Among the first deployments is Reddot Technologies, which is using Genome Shield to address both inbound DDoS attacks and outbound threats originating from compromised subscriber devices. Nokia said the platform introduces four primary security functions: botnet command-and-control disruption, proactive DDoS traffic policing, customizable security policies via open APIs, and enhanced observability tools that provide visibility into compromised devices, botnet endpoints, and emerging threats. The solution supports on-premises, SaaS, and hybrid deployment models and works alongside Nokia Deepfield Defender and the Nokia 7750 Defender Mitigation System.
- Targets AI-driven DDoS attacks and residential proxy botnets
- Monitors threat intelligence across more than 5 billion internet endpoints
- Designed for telecom operators, hosting providers, IXPs, and cloud builders
- Extends Nokia Deepfield Defender with proactive enforcement capabilities
- Supports botnet C2 disruption, DDoS policing, custom policies, and observability
- Compatible with Nokia 7750 Defender Mitigation System
- Available in on-premises, cloud, and hybrid deployment models
- Additional capabilities scheduled throughout 2026
“The past year has fundamentally changed DDoS security. Residential proxy botnets have invalidated 25 years of assumptions about how attacks work and how to defend against them,” said Jeff Smith, Vice President and General Manager of Nokia Deepfield.
🌐 Analysis
Genome Shield reflects a growing concern among service providers that traditional DDoS defense architectures are no longer sufficient for modern attack patterns. Historically, mitigation relied on diverting malicious traffic to centralized scrubbing centers after an attack was detected. Today’s attacks increasingly leverage millions of compromised residential devices, rapidly changing source addresses and generating short-duration bursts that can overwhelm networks before diversion mechanisms can respond.
The launch also highlights Nokia’s continued investment in security automation as part of its broader network infrastructure portfolio. Deepfield has become an increasingly important component of Nokia’s IP networking strategy, complementing its 7750 Service Router platform and giving operators greater visibility into traffic flows, DDoS activity, and AI-driven network operations. As operators deploy AI systems to automate network management, the quality and trustworthiness of telemetry data itself is becoming a strategic asset, making proactive threat suppression increasingly important.
- Following its acquisition in January 2017, internet traffic analytics startup Deepfield Inc. was integrated into Nokia’s IP Networks division. Today, Deepfield operates as Nokia’s specialized brand and product portfolio for big data analytics, network intelligence, and automated, AI-driven DDoS security software.
