VeriSign, a provider of Internet infrastructure services, has launched a new monitoring-only service for Distributed Denial-of-Service (DDoS) attacks. It is an extension of the VeriSign Internet Defense Network, a cloud-based DDoS mitigation service introduced earlier this year.

VeriSign Internet Defense Network is a network and hardware agnostic DDoS monitoring, mitigation and attribution service that detects and filters malicious traffic away from enterprise web sites. The defense network uses a proprietary filtering technology to stop a DDoS attack in the cloud before it reaches a customer’s network.

The company said that the DDoS monitoring-only service allows enterprises to enable identification of unusual site traffic patterns that may represent an oncoming attack, with easy cross-over to mitigation service if needed.

If an attack occurs, clients are notified by a VeriSign Internet Defense Network technician who will seek input from the clients and then provides them with a recommended course of action. In the case of a verified DDoS attack, the VeriSign Internet Defense Network can filter the client’s web traffic, blocking virtually all malicious traffic while enabling legitimate traffic to reach its intended destination, the company said.

Ken Silva, CTO of VeriSign, said: A number of recent high-profile attacks against the United States and South Korean governments and popular social networking sites have moved DDoS up the list of concerns for many CISOs.

The addition of a DDoS monitoring-only service will help many companies that depend on online commerce and communication by providing a means of watching for changes in Web site traffic that may indicate an impending attack.