Are you human or a damn bot?
summary
About half of web traffic is non‑human and e‑commerce sites see both harmless crawlers and profit‑driven fraud bots; logs show 4 million vs 300k (human vs malicious) login attempts, from ~20,000 IPs and 4,500 user agents. Attackers rent proxies, rotate headers, bypass CAPTCHAs and run credential stuffing with tools like Sentry MBA against demo sites using proxy lists and replayed sessions, and Akamai records a peak transactional attack of 11,000 req/s. The demo succeeds quickly, proving low-cost lists plus bots yield effective account takeover.
AI-written summary · about
chapters (7)
- 0:00Start
- 4:34THE BOT PROBLEM
- 18:46BOT KILL CHAIN
- 20:51SENTRY MBA
- 30:08DETECTION
- 34:09BEHAVIOR ANOMALY
- 40:29WHAT YOU NEED
related talks
38mRise Of The Machines - How Automated Processes Overtook the Web
54mDetecting and managing bot activity more efficiently
40mYou have a security problem - your users
16mProtecting your application from bot attacks (PRT019)
51mAutomated Threats: The Rise of Bots and What to Do About It
29mBecoming You: A Glimpse Into Credential Abuse
48mWho’s in control: Human or Machine?
41mThe State Of Credential Stuffing And The Future Of Account Takeovers