NTT Application and API Shield by NTT ASEAN

NTT's Application and API Shield offering is powered by F5 Distributed Cloud Web Application and API Protection (WAAP) Platform. This solution delivers robust and effective security across public clouds and on-premises architectures to protect organizations from compromise, fraud, and abuse.

The NTT Application and API Shield provides the following:

• Protect against emerging threats - As apps evolve and API deployments increase, attack surface areas are increasing and bring greater risk.
• Dramatically simpler operations - Reduce the number of point solutions and centralize security policy enforcement across distributed environments.
• Best-in-class bot detection and WAF - Market-leading bot detection technology for highly accurate protection from malicious bots.
• Protect the entirety of your apps - Selective coverage is no longer enough. Apps need protections for WAF, API security, DDoS, and bots.
• Consistent security policies everywhere - Deploy consistent policies across your entire estate of apps regardless of where they’re hosted.
• End-to-end observability - Gain valuable insights and telemetry across your distributed app infrastructure from a centralized user interface.

This solution integrates four key security components as below:

• Web Application Firewall (WAF) - Protects web-based applications through full proxy inspection of application requests and responses to mitigate a broad spectrum of threats.
• API Protection - Guards application programming interfaces from threat actors that attempt to exploit and/or abuse them to facilitate a breach, service outage, or fraud.
• Bot Defence - Manages and detects bots and malicious automation while brokering legitimate machine-to-machine communication to defend against business logic attacks, account-take-over, credential stuffing and more.
• DDoS Protection - Shields critical infrastructure from volumetric and targeted L7 denial-of-service attacks that attempt to overload your services; often resulting in a loss of customer confidence and access to services.

NTT Service Variants - Application and API Shield offering:

• Starter - This tier comes with Advanced WAF, Basic version of API Security & Bot Defence with signature-based detection and DDoS mitigation.
• Silver - This tier comes with Advanced version of WAF & API Security utilizing the Machine Learning / AI engine to identify malicious clients, Basic Bot Defence and DDoS mitigation.
• Gold - This tier comes with Advanced version of WAF, API Security and Bot Defence utilizing the Machine Learning / AI engine to identify malicious clients and DDoS mitigation.
• Plus - This tier is for multi-cloud networking and Security with Customer Edge for on-premises and public clouds