Rock 'Em Sock 'Em Robots: Bot Swatting Like the Pros
summary
Covers concrete detection and mitigation techniques: detect bots by verb distribution, header order and velocity (one-second intervals in a carding example), and force bots to reveal themselves by asking them to follow 302s or execute JavaScript (Navigator checks, cursor patterns). Describes an implemented system that logs, visualizes and dynamically blocks attackers using the open source rep sheet and client-side fingerprinting like fingerprintjs2, stopping attacks that would otherwise run 10,000 times and restoring clean analytics.
AI-written summary · about
chapters (32)
- 0:00Intro
- 1:17The Internet is effectively powered by robots
- 1:55Robot vs human
- 3:16Bot traffic
- 4:07What are bots actually doing
- 6:36HTTP verbs
- 7:38Scrapers
- 9:07API Docs
- 11:05Asymmetric Warfare
- 12:04Scanning
- 13:58Talk to your company
- 14:30Web application firewalls
- 15:54Denial of service attacks
- 16:39Focused target
- 18:40Requests
- 19:11Carding Attack
- 22:32Carding
- 23:10Behavior Deviation
- 23:53Access Patterns
- 24:56Geolocation
- 25:48User Agent
- 26:52Success Rates
- 27:42Intent
- 29:37JavaScript
- 30:38Flash
- 31:08User Experience
- 32:23Fingerprints
- 33:26Team Management
- 34:46Rapsheet
- 37:21Reduce Noise
- 38:07Improve Confidence in Data
- 38:40References
related talks
01h 00mRock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros
48mHow to Thwart Malicious Automation and Kick Bot Butt for $0
34mArchitecture of an Anti-Bot Protection
31mStrategies for Identifying and Mitigating Bot Threats
50mArchitecture of an Anti-Bot Protection
48mWho’s in control: Human or Machine?
23mBot or human? Detecting malicious bots with machine...
42mCracking the Code: Decoding Anti-Bot Systems!