How to Thwart Malicious Automation and Kick Bot Butt for $0
summary
Claims that a practical anti-bot program can run with zero vendor spend, using open-source pieces and architecture choices, and shows a working demo. Tools and tactics include varnish morphing mod_security 406 to 403 at the edge, ELK for log aggregation, network fingerprints like ja3 and zardox p0f, and client-side fingerprints like creep.js. Demo builds a Vagrant/Flask stack that ties these together and behaves as intended; observed attack patterns include botnets with tens of thousands of IPs across hundreds of ASNs.
AI-written summary · about
chapters (6)
- 0:00How to thwart malicious automation and kick bot butt for $0
- 4:12The bots are coming
- 12:33Bot detection approaches
- 24:57Threat profiling
- 31:52Tactical maneuvers
- 44:19Implementation patterns
related talks
31mStrategies for Identifying and Mitigating Bot Threats
40mRock 'Em Sock 'Em Robots: Bot Swatting Like the Pros
01h 00mRock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros
34mArchitecture of an Anti-Bot Protection
23mBot or human? Detecting malicious bots with machine...
12mSpeed, scale & stealth: Securing against ATO events
50mArchitecture of an Anti-Bot Protection
42mCracking the Code: Decoding Anti-Bot Systems!