My journey through building an advanced bot detection product
summary
Built a product that detects and manages bots at the edge for large ecommerce and finance sites and launches iteratively from 2015 to 2017, combining passive detection (headers, rate, reputation), active JS fingerprinting and an acquired startup product Seraphin for behavioral anomaly detection, plus an SDK for native apps. It catches scrapers, headless browsers and replayed telemetry but triggers an arms race: account checkers and gift card PIN attacks force constant tuning to balance false positives and scale under high-volume attacks.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:55Davids background
- 2:45The journey so far
- 5:00What is bot detection
- 6:22Bot detection evolution
- 14:11Bot management
- 15:55Bot attacks
- 24:11Detection market
- 26:27Best practices
related talks
23mBot or human? Detecting malicious bots with machine...
34mArchitecture of an Anti-Bot Protection
01h 00mRock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros
52mBreaking Fraud and Bot Detection Solutions
12mSpeed, scale & stealth: Securing against ATO events
50mArchitecture of an Anti-Bot Protection
15mLevel up security: Advanced AWS WAF rules & bot detection techniques
48mHow to Thwart Malicious Automation and Kick Bot Butt for $0