Name: The BLADE Framework: The MITRE ATT&CK-style Framework for Bot Attacks [Part 2]
Start: 2024-02-06T14:19:00Z
End: 2024-02-06T14:19:19.000Z
Location: BrightTALK
Rating: 0

Netacea bot protection helps enteprise brands detect and mitigate the most sophisticated bot attacks. 
Get better detection of bot attacks across all your websites, apps and APIs, without agents. Netacea uses edge-computed behavioural analysis to give you the ultimate in protection through a single, lightweight integration that's invisible to attackers.

Just as security professionals rely on MITRE ATT&CK to help them understand technical vulnerabilities, the BLADE Framework® is a vital learning tool in the battle against bot attacks like credential stuffing, scraping and scalping.

The BLADE Framework is an open-source educational resource describing a wide range of malicious bot tactics and techniques, developed by the Netacea threat research team with contributions from experts at organizations including Adidas and OVO Energy.

If you’re not already using BLADE, this webinar offers the chance to hear from a core contributor to the project. Cyril Noel-Tagoe explains how businesses can use BLADE to categorize and shut down bot attacks, whilst one of Netacea’s bot experts uses real data to demonstrate how our clients benefit from using the framework to understand bot threats they face daily.

Covered in part one:
- An introduction to the BLADE Framework; a MITRE ATT&CK-style framework for bots
- How to apply the BLADE Framework to a simulated credential stuffing attack, executed in real time

Speakers:

Cyril Noel-Tagoe (Principal Security Researcher at Netacea) is an experienced information security professional. He spends his time researching, speaking and writing about malicious bots and other cyber security topics. He comes from a consulting background, having advised financial services organizations on a range of technical and non-technical cyber security domains in a previous life.

Paulina Cakalli (Lead Data Analyst at Netacea) works closely with Netacea’s data science and threat research teams to develop new models for detecting anomalous web traffic, combining this with machine learning to produce recommendations for clients. She is a rising star in the world of data science, encouraging other women to enter STEM careers via various speaking opportunities internationally. Paulina co-founded BSides Tirana, an international security conference.

The BLADE Framework: The MITRE ATT&CK-style Framework for Bot Attacks [Part 1]

We've all experienced it – that must-have ticket or item is due to be released, causing thousands to rush online to be at the product drop. This sudden influx of traffic overwhelms and breaks eCommerce infrastructures, damaging profits and frustrating fans.

On top of this, valuable items of any kind inevitably attract bots – automated to check out faster than any human, then resell the items at a marked-up price. With huge profits to be made, bots will stop at nothing to flood web stores and snatch inventory ahead of people.

By combining a virtual waiting room from Queue-it with advanced bot protection from Netacea, you can keep bad bots clear of hype drops and free up your infrastructure for real fans. Your web stores stay online, and genuine customers can buy at fair prices, without interruption.

In this webinar, you will hear how Queue-it and Netacea:
- Safeguard sites during sudden traffic spikes to ensure smooth sales
- Eliminate bad bots before they snatch inventory for resale
- Integrate closely to deliver smooth, bot-free product drops

Speakers

Thomas Platt – VP Pre-Sales, Netacea
Netacea protects some of the busiest sites in the world from malicious automated traffic. Tom has been instrumental in the sales growth of Netacea since its inception, driving industry research, thought leadership and knowledge sharing. Tom’s focus is to ensure Netacea and its customers stay ahead of emerging bot threats and share this knowledge with the wider community.

Jose Quaresma – VP Technical Engagement, Queue-it
Jose is the Vice President of Technical Engagement at Queue-it, the leading virtual waiting room solution. At Queue-it, Jose's Technical Engagement team focuses on ensuring that customers get the solution that best fits their needs, have a successful start with the company, and continuously get the most value from the solution. He is passionate about leveraging technology to solve complex problems.

How To Handle Peak Traffic Spikes and Mitigate Bot Attacks

Bots running rife on the internet is nothing new, but if recent incidents like widespread PS5 scalping or credential stuffing of major brands’ websites are anything to go by, bot attacks have become a major disruptor to businesses.

Businesses have long fought back to detect and block such attacks, yet bot operators quickly adapt to ensure they continually evade detection. How do bot operators win against their victims so frequently? And how do bots routinely beat defenses developed to stop them?

In this webinar, Netacea Principal Security Researcher Cyril Noel-Tagoe breaks down the bot attack lifecycle, showing how bot attacks slip under the radar of many popular anti-bot technologies using tactics such as proxying to residential IPs, CAPTCHA farms, and de-obfuscation of code used by bot detection tools.

How Bots Win: Bot Defense Bypass Techniques

The explosive impact of ransomware and GDPR fines grab attention in boardrooms and in the press, but the corrosive damage of automated attacks is just as ruinous. Bad bots are to blame, striking businesses in their billions daily.

Now in its third year, Netacea’s study continues to shed light on the financial impact of bots. Independent research firm Coleman Parkes surveyed 440 US & UK businesses with an average online revenue of $1.9bn across the travel, entertainment, ecommerce, financial services and telecoms sectors.

This year’s study brings shocking findings into focus:

$85.6m (or 4.3% of online revenue) was lost by each business, on average, to bot attacks last year – more than twice the previous figure.
Four months is the average time taken to detect bot attacks.
72% of businesses detected attacks from China, and 66% from Russia (an 82% increase over the previous two years).
40% of enterprises are attacked via their APIs – and for the first time, bots are targeting mobile apps more than websites.
On this webinar, you’ll hear expert analysis of these findings from Netacea Principal Security Researcher Cyril Noel-Tagoe, industry insights from Tom Parker, Cyber Security Manager at BT, and academic viewpoints from Rob Black, Lecturer in Information Activities at Cranfield University.

Death By A Billion Bots - The Accumulating Cost of Malicious Automation

2023 has cast the spotlight on scalper bots, which set fans into a frenzy of frustration when they put access to their favourite stars of music and sports out of reach.

As the threat posed by scalper bots continues to grow, this is an ideal webinar for those looking to understand more about those behind the bots and the ethical grey area that surrounds use of scalper bots.

Our panel of experts share their thoughts on the scalper bot threat and the significance of lawmakers becoming involved as they try to find a solution.

Bot Legislation & the Ethical Grey Area

The BLADE Framework: The MITRE ATT&CK-style Framework for Bot Attacks

Unlock the Power of BLADE Framework®: A Webinar Exploring Bot Attack Mitigation

Just as security professionals rely on MITRE ATT&CK to navigate technical vulnerabilities, the BLADE Framework® emerges as a pivotal educational asset in the relentless battle against bot assaults, encompassing threats like credential stuffing, scraping, and scalping.

Developed by Netacea's threat research team with input from Adidas and OVO Energy, BLADE offers insights into malicious bot tactics.

In this 20-minute webinar, Cyril Noel-Tagoe, a core contributor, explains how BLADE categorizes and stops bot attacks. Netacea's expert demonstrates BLADE's real-world benefits.

Part 2 covers:

Scalper bot attack data analysis
How Netacea protects clients using BLADE
Speakers:

Cyril Noel-Tagoe: Principal Security Researcher at Netacea, Cyril advises financial services on cybersecurity.

Paulina Cakalli: Lead Data Analyst at Netacea, Paulina develops traffic detection models and encourages women in STEM.

The BLADE Framework: The MITRE ATT&CK-style Framework for Bot Attacks [Part 2]

Botnets

bot protection

bot management

Information Security

Web Application Security

MITRE

Cyber Defense

scalper bots

web application security

bot mitigation

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

The BLADE Framework: The MITRE ATT&CK-style Framework for Bot Attacks [Part 2]

Presented by

About this talk

More from this channel