Netscout Systems (NASDAQ: NTCT) announced an extension of its Adaptive DDoS Protection solution to automatically detect and mitigate outbound DDoS attack traffic generated by compromised subscriber devices on service provider networks.

The update targets a growing threat from consumer broadband routers, cameras, and other IoT devices being used by Turbo-Mirai class botnets, which the company says are capable of generating multi-terabit attacks. According to the press release, such outbound attacks have caused service outages, reputational damage, and strained peering relationships, leading to higher transit costs for service providers.

The expanded capability is part of Netscout's Arbor Sightline and Arbor Threat Mitigation System product line. It uses AI and machine learning to analyze outbound internet traffic, drawing on threat intelligence the company says covers approximately half of all internet traffic to identify and suppress attacks at their source before they affect other networks.

"By using our internet-scale visibility to derive localized threat intelligence for our customers, Netscout can identify and precisely suppress attacks at their origin, before they cause problems locally or at their target," said Darren Anstee, CTO of Security at Netscout.

Patrick Donegan, founder and principal analyst at HardenStance, said in the release that source-side mitigation "is a critical part of the equation," adding that Netscout's approach, backed by its ATLAS Intelligence Feed and ASERT analyst team, gives service providers tools to detect and stop attacks before impact.

The solution extends an existing inbound DDoS detection workflow to cover outbound and cross-bound traffic, combining customized detection with threat intelligence tailored for individual internet service providers.