Standard Classification: Good Bot, Bad Bot: Characterizing Automated Brows...
summary
A deployable system called Aristeus honeysites runs 100 fresh domains for seven months and records 26.4M requests and 200 GB from ~287K IPs, producing concrete signals: 0.63% JavaScript support so JS fingerprinting rarely fires, TLS cipher fingerprints collapse clients to 558 fingerprints and show 86% of Chrome/Firefox claims are fake, 50% of requests are brute‑force from ~47K IPs with 99.6% trying fewer than ten passwords, and weaponization hits sometimes on day zero.
AI-written summary · about
chapters (5)
- 0:00Start
- 4:51Detecting malicious web bots
- 12:33Overview of Aristaeus
- 20:51Popular endpoints
- 26:00Bad bots: Reconnaissance
related talks
42mCracking the Code: Decoding Anti-Bot Systems!
48mWho’s in control: Human or Machine?
38mRise Of The Machines - How Automated Processes Overtook the Web
01h 00mRock ‘Em Sock ‘Em Robots: Bot Swatting Like the Pros
16mLotta ai bot dannosi
48mHow to Thwart Malicious Automation and Kick Bot Butt for $0
54mDetecting and managing bot activity more efficiently
31mStrategies for Identifying and Mitigating Bot Threats