Bot prevention: Difference between revisions
create |
(No difference)
|
Revision as of 21:34, 23 August 2021
Anti-bot protection refers to the methods used by web services to prevent access by automated processes.
Bots are used for various purposes online. Some bots are used passively for web scraping purposes, for example to gather information from airlines about flight prices and destinations. Other bots, such as sneaker bots, help the bot operator acquire high-demand luxury goods; sometimes these are resold on the secondary market at higher prices, in what is commonly known as 'scalping'.[1][2][3] Bot detection utilises various fingerprinting techniques to identify whether the client is a human user or a bot. Bots utilise a range of techniques to avoid detection and appear like a human to the server.[1]
Bot detection techniques include forging user agents, using headless browsers to simulate actual web browsers and execute code, such as client-side JavaScript, that is used for anti-bot detection; simulating human mouse movements;[4] using anonymous proxies to avoid appearing like the same user.[1] More basic techniques include using CAPTCHAs, however these are generally considered ineffective and obtrusive to human visitors.[5]
In the United States, the Better Online Tickets Sales Act (commonly known as the BOTS Act) was passed in 2016 to prevent some uses of bots in commerce.[6] A year later, the United Kingdom passed similar regulations in the Digital Economy Act 2017.[7][8] The effectiveness of these measures is disputed.[9]
Anti-bot protection services are offered by various internet companies, such as Cloudflare[10] and Akamai.[11][12]
References
- ^ a b c Chiapponi, Elisa; Dacier, Marc; Todisco, Massimiliano; Catakoglu, Onur; Thonnard, Olivier (2021). "Botnet Sizes: When Maths Meet Myths". Service-Oriented Computing – ICSOC 2020 Workshops: 596–611. doi:10.1007/978-3-030-76352-7_52.
- ^ Marks, Tod. "Why Ticket Prices Are Going Through the Roof". Consumer Reports.
- ^ "Bad Bot Report 2021" (PDF). Imperva. Retrieved 23 August 2021.
- ^ Wei, Ang; Zhao, Yuxuan; Cai, Zhongmin (2019). "A Deep Learning Approach to Web Bot Detection Using Mouse Behavioral Biometrics". Biometric Recognition: 388–395. doi:10.1007/978-3-030-31456-9_43.
- ^ Chu, Zi; Gianvecchio, Steven; Wang, Haining (2018). "Bot or Human? A Behavior-Based Online Bot Detection System". From Database to Cyber Security: Essays Dedicated to Sushil Jajodia on the Occasion of His 70th Birthday: 432–449. doi:10.1007/978-3-030-04834-1_21.
- ^ Sisario, Ben (9 December 2016). "Congress Moves to Curb Ticket Scalping, Banning Bots Used Online". The New York Times.
- ^ Keepfer, DLA Piper-Francis (10 January 2018). "UK Government criminalises the use of ticket tout bots". Lexology.
- ^ "New law will ban use of bots to bulk buy tickets". Which? News. 23 April 2018.
- ^ Elefant, Sammi (2018). "Beyond the Bots: Ticked-Off Over Ticket Prices or The Eternal Scamnation". UCLA Entertainment Law Review. 25 (1). doi:10.5070/LR8251039716. ISSN 1073-2896.
- ^ "Cloudflare Bot Management". Cloudflare.
- ^ "Bot Manager". Akamai Technologies. Retrieved 23 August 2021.
- ^ "Akamai Bot Manager". Akamai Technologies.