Nokia launches Deepfield Genome Shield security automation system to deliver proactive ...

· Nokia Deepfield Genome Shield enables proactive, continuously updated, always-on network protection — moving beyond reactive approaches that cannot keep pace with modern, rapid multi-terabit DDoS attacks

· Solution is Nokia’s first dedicated AI‑era security suite — protecting networks from AI‑driven threats while delivering clean, continuously updated security telemetry that operator AI and ML systems increasingly rely on.

Nokia today announced the launch of Nokia Deepfield Genome Shield, the industry’s first security automation system that facilitates proactive, always-on DDoS protection for telecommunications providers, hosting companies, internet exchange points, and cloud builders in the AI era. Genome Shield addresses the fundamental shift in DDoS threats driven by the emergence of residential proxy botnets, which now comprise approximately 200 million compromised devices worldwide.

Nokia Deepfield Genome Shield introduces a new class of proactive, network-wide security automation that extends Deepfield Defender to address previously unaddressable use cases. The solution has been shaped through close engagement with customers and the wider security community as part of ongoing efforts to combat DDoS and botnet-driven threats. It shifts protection from reactive mitigation to proactive enforcement leveraging existing network infrastructure. Genome Shield aggregates continuously updated threat intelligence from multiple sources, including Nokia Deepfield Secure Genome® (spanning over five billion internet endpoints), GDTA telemetry, and Deepfield’s cyber range, where live malware and botnet command-and-control (C2s) generate real-time insights. All of this intelligence is further compiled in Deepfield Defender into automated DDoS policies and enforced as network-wide protection against modern cyberthreats, such as outbound DDoS.

The past year has fundamentally changed DDoS security. Residential proxy botnets have invalidated 25 years of assumptions how attacks work and how to defend against them. The hard problem today is maintaining dynamic, massive IP threat feeds and enforcing protection against them in real time, at network scale, continuously and automatically. Genome Shield is the industry's answer to that challenge. It combines several intelligence sources, including our unique cyber range and Secure Genome's visibility into more than five billion internet endpoints, with Deepfield Defender’s automated policy compilation and enforcement across the entire network. For the more than 1,000 hosting companies, service providers, and internet exchange points that face this new generation of threats, Genome Shield delivers the commercial, scalable answer."

Genome Shield extends Deepfield Defender's existing DDoS countermeasure portfolio with network-wide automated enforcement, organized across four pillars: Botnet C2 Disruption, which blocks command-and-control communications so attacks cannot be launched; DDoS Policers, which suppress amplification and volumetric traffic through proactive rate limiting; Custom Policies, enabling user-defined rules via open APIs for easy integration; and Observability, providing dashboards for compromised devices, botnet endpoints, and emerging security trends.

Genome Shield requires Nokia Deepfield Defender and is compatible with both router-based edge mitigation and with the Nokia 7750 Defender Mitigation System (DMS) for dedicated L4-L7 DDoS scrubbing. It supports on-premises, cloud-based (SaaS), and hybrid deployment models with flexible pay-as-you-grow licensing.

Initial capabilities of Genome Shield have already been introduced within Nokia Deepfield Defender and are in use by customers today. Additional features will be rolled out throughout 2026.

Multimedia, technical information and related news

Webpage: Nokia Deepfield Defender

Webpage: Nokia Deepfield Genome

Webpage: Nokia Deepfield Genome Shield

Blog: Herd immunity for the internet (by Jérôme Meyer)

Webpage: Internet and security maps for network intelligence | Nokia

Webpage: Deepfield Defender | Advanced DDoS Security by Nokia

Webpage: Nokia 7750 Defender Mitigation System

Webpage: Nokia FP Network Processor Technology

Webpage: Nokia DDoS Security

Webpage: Nokia Deepfield Global DDoS Threat Alliance (GDTA)

Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile, and transport networks, we’re advancing connectivity to secure a brighter world.