Automated Threats: The Rise of Bots and What to Do About It
summary
Demonstrates automated bot attacks against web applications, specifically live credential stuffing and business-logic abuse, using a real-time simulation to show how quickly and cheaply such attacks can be launched and how long they can remain undetected. Describes detection and mitigation techniques for stopping large-scale bot-driven fraud and credential stuffing, drawing on Netacea’s threat research and defensive approaches.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:38What is Business Logic?
- 5:34Business Logic In Action: Customer Experience
- 8:02'Hacking' vs business logic attacks
- 10:23Bots & business logic attacks
- 16:45Financial Services Bot Ecosystem
- 21:16Key facts & figures (2022)
- 23:23The BLADE Framework
- 37:36BLADE Framework Usage
- 40:45Questions?
related talks
29mBecoming You: A Glimpse Into Credential Abuse
40mWeb Attacks and Fraud: Lessons Learned from the Deep End of the Pool
41mThe State Of Credential Stuffing And The Future Of Account Takeovers
31mStrategies for Identifying and Mitigating Bot Threats
12mSpeed, scale & stealth: Securing against ATO events
11mHow to Navigate Emerging AI-Driven Security
49mAre you human or a damn bot?
01h 00mRock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros