Attacker Automation: How Bots Are Evading Your Defenses For Fraud And Profit

As defenders, we increasingly look to automation and machine learning to detect attacks and tune our defences. But we’re not alone. Organised crime constantly develops their capabilities and continuously looks for ways to attack applications without being detected. Automation plays a huge part in this. This talk uncovers the modern automated methods which attackers are using to bypass CAPTCHAs, multi-factor authentication, client finger printing, and bot detection systems. We will explain the methods they use and take you through some real attack stories so that you will better understand the capabilities of organized threat actors. Key Learning Objectives: 1. The tools and techniques attackers are using to bypass bot detection 2. Examples of real bot attack stories 3. Recommended methods for detecting and dealing with heavily automated attacks