Nokia launches Deepfield Genome Shield security automation system

Nokia launched Nokia Deepfield Genome Shield, a security automation system aimed at delivering proactive, always-on DDoS protection across networks. The update matters because the company said DDoS attacks have shifted toward residential proxy botnets and faster, multi-terabit bursts.

Nokia said the threat landscape changed over the past 12 months, with attacks coming from real subscriber devices and rotating IPs across thousands of nodes. The company described residential proxy botnets as compromised devices used for evasive attacks, and said traditional scrubber-based diversion and reactive mitigation could not respond quickly enough to sub-minute attacks.

Genome Shield introduced a network-wide security automation approach that extends Deepfield Defender, moving protection from reactive mitigation to proactive enforcement using existing network infrastructure. Nokia said the system aggregates continuously updated threat intelligence from Nokia Deepfield Secure Genome, GDTA telemetry, and Deepfield’s cyber range, then compiles automated DDoS policies in Deepfield Defender and enforces them as a security shield across the network.

As part of its described deployment, the solution was shaped through engagement with customers and the security community, and initial capabilities were already introduced within Nokia Deepfield Defender and used by customers. Nokia said additional features rolled out throughout 2026, and it listed Genome Shield capabilities across four pillars: Botnet C2 Disruption, DDoS Policers, Custom Policies via open APIs, and Observability. Genome Shield required Nokia Deepfield Defender and it was compatible with router-based edge mitigation and the Nokia 7750 Defender Mitigation System (DMS) for dedicated L4-L7 DDoS scrubbing.

Provided by Globe Newswire on behalf of Nokia. Click to read original content.