Level up security: Advanced AWS WAF rules & bot detection techniques
summary
Demoed an AWS WAF deployment on Amazon CloudFront that uses AWS WAF Bot Control managed rule groups (common and targeted), ML labeling and device fingerprinting, plus challenge action (307 redirect with silent JS token) and CAPTCHA, with SDKs for JavaScript Android iOS. Tests show simple curl/wget scans flagged as HTTP library, Selenium browser emulation still labeled as automated browser, and a credential-stuffing run triggers an account takeover prevention signal that can add a header to force MFA or block. Claims 47% of traffic is bots and 30% is unidentified.
AI-written summary · about
chapters (9)
- 0:00Introduction to bot threats
- 2:39AWS WAF managed rules
- 3:46Advanced mitigation options
- 6:09Challenge and token mechanism
- 8:24Captcha and SDK integration
- 10:05Demo: Basic bot detection
- 11:56Demo: Advanced browser bots
- 13:05Demo: Account takeover fraud
- 14:09Summary and resources
related talks
45mThe good, the bad and the verified - AWS WAF vs. bots
33mNetwork and application protection on AWS
39mHelp prevent account fraud with AWS WAF
53mHow AWS threat intelligence becomes managed firewall rules
16mAutomating AWS WAF: Pioneering future security
29mWeb application protection on AWS
43mMaking WAF Mainstream: From Static Defenses to... (Roy Weisfeld, Surya Pentakota)
15mBuilding a secure perimeter with AWS WAF