Nokia launches Deepfield Genome Shield, expands 5G work in Indonesia
Nokia Corporation launched the Deepfield Genome Shield, a proactive security automation system for DDoS protection, addressing threats from residential proxy botnets. The company also expanded its partnership with Indosat Ooredoo Hutchison to modernize the latter's 5G network in Indonesia, aiming for 80% mid-band coverage over 3.5 years.

*this image is generated using AI for illustrative purposes only.
Nokia Corporation today announced the launch of Nokia Deepfield Genome Shield, the industry's first security automation system that delivers proactive, always-on DDoS protection for telecommunications providers, hosting companies, internet exchange points, and cloud builders in the AI era. Genome Shield addresses the fundamental shift in DDoS threats driven by the emergence of residential proxy botnets, which now comprise approximately 200 million compromised devices worldwide. The solution moves beyond reactive approaches to provide continuously updated, network-wide protection against modern, rapid multi-terabit attacks. Separately, Nokia announced an expanded partnership with Indosat Ooredoo Hutchison to modernize the latter's nationwide mobile network in Indonesia.
Addressing the AI-era threat landscape
The DDoS threat landscape has shifted over the past 12 months, with attacks now originating from real subscriber devices and delivering multi-terabit bursts lasting seconds to minutes. Residential proxy botnets, estimated at 250–600 Tbps, dynamically leverage large numbers of residential users to generate evasive attacks impacting national networks. Traditional scrubber-based diversion and reactive mitigation cannot respond quickly enough to these sub-minute attacks. Automated, AI-driven DDoS has industrialized the residential proxy supply chain, while AI-assisted code generation accelerates the evolution of evasion techniques.
Proactive security automation
Nokia Deepfield Genome Shield introduces a new class of proactive, network-wide security automation that extends Deepfield Defender to address previously unaddressed use cases. It shifts protection from reactive mitigation to proactive enforcement leveraging existing network infrastructure. Genome Shield aggregates continuously updated threat intelligence from multiple sources, including Nokia Deepfield Secure Genome® (spanning over five billion internet endpoints), GDTA telemetry, and Deepfield's cyber range. This intelligence is compiled in Deepfield Defender into automated DDoS policies and enforced as a security shield across the network.
Four pillars of protection
Genome Shield extends Deepfield Defender's existing DDoS countermeasure portfolio with network-wide automated enforcement, organized across four pillars:
| Pillar | Function |
|---|---|
| Botnet C2 Disruption | Blocks command-and-control communications so attacks cannot be launched |
| DDoS Policers | Suppresses amplification and volumetric traffic through proactive rate limiting |
| Custom Policies | Enables user-defined rules via open APIs for easy integration |
| Observability | Provides dashboards for compromised devices, botnet endpoints, and emerging security trends |
Expanding 5G work in Indonesia
Investor attention also turned to Nokia's expanded 5G work in Indonesia. Nokia and Indosat Ooredoo Hutchison announced a partnership to modernize Indosat's nationwide mobile network. Nokia will support low- and mid-band 5G deployment across Indosat's network. Mid-band coverage is expected to reach about 80% of the network over the next 3.5 years. The AI-ready network will support AI-RAN architecture and an AI Grid deployment with NVIDIA, with field trials expected by the end of 2026. Nokia will provide Habrok and Pandion radios, Levante basebands, Centralized RAN, and network automation platforms. CEO Justin Hotard said the partnership will help build a network that "expands 5G, enables new AI-driven services and creates long-term value."
Availability and compatibility
Genome Shield requires Nokia Deepfield Defender and is compatible with both router-based edge mitigation and with the Nokia 7750 Defender Mitigation System (DMS) for dedicated L4-L7 DDoS scrubbing. It supports on-premises, cloud-based (SaaS), and hybrid deployment models with flexible pay-as-you-grow licensing. Initial capabilities have already been introduced within Nokia Deepfield Defender and are in use by customers today, with additional features rolling out throughout 2026.
How will the introduction of proactive enforcement models impact the traditional DDoS mitigation hardware market?
What are the potential revenue implications for Nokia's Network Infrastructure segment given the new licensing model for Genome Shield?
To what extent will the integration with NVIDIA's AI Grid accelerate the commercialization of AI-RAN architectures beyond the Indonesian market?

























