Bots & Abuses Advanced
Learn about data collection strategy, common detection methods, and risk score models
Available spots
Service Description
Join our comprehensive three (3) hours session to learn about the essential data you'll need to collect server and client side to build your detection. We'll review the most useful protocol level data to collect that reflects how clients establish a connection with the server at the TCP/IP, TLS and HTTP layers but also the essential data points to collect client side through JavaScript that reflect the device and browser characteristics and some of the user preferences. Then we'll dive into how to use the data to build detections to identify business critical bots like web search engines and social media bots but also detect evasive bots that attempt to blend into the legitimate traffic through common methods like IP reputation, rate limiting, protocol anomaly detection, fingerprint anomalies, behavior anomaly detection or behavioral biometric detections. Finally we'll discuss a simple risk score model to combine the various detection methods into an accurate detection strategy. At the end of the session, participants will be able to: - Identify critical data points to collect client ad server side and their values for building detection methods - Describe the logic behind common transparent and stateful detection methods - Understand the infrastructure needed to build bot detection - Describe a simple risk scoring model leveraging the various detection methods to achieve an accurate detection strategy This session includes a free copy of the Reign of Botnets for new participants.
Upcoming Sessions
Cancellation Policy
1. Registration & Access Upon registration, students will receive a confirmation email. A Zoom invitation with access details will be sent prior to the scheduled training date. 2. Cancellations Students may cancel their registration up to 24 hours before the scheduled start time of the training. Cancellations made at least 24 hours in advance are eligible for a full refund, or rebooking into another available session of the same training. Requests made less than 24 hours before the training start time are not considered eligible for cancellation. 3. No-Show Policy A no-show is defined as a student who does not attend the scheduled training session. In the event of a no-show, no refunds will be issued. The student may rebook once for the next available session of the same training at no additional cost. 4. Late Arrival Policy Students are expected to join the training at the scheduled start time. If a student joins one hour or more after the session has started, this will be treated as a no-show. In such cases, no refund will be issued. The student will be allowed to rebook for a future session of the same class. 5. Rebooking Conditions Rebooking is subject to session availability. Rebooked sessions must be of the same training course and cannot be exchanged for a different offering. Rebooking requests must be made within a reasonable timeframe after the missed or canceled session. 6. Contact For cancellation, refund, or rebooking requests, please contact us at contact@botintelsecurity.com with your registration details. 7. Force Majeure & Technical Issues The training provider shall not be held liable for delays, interruptions, or failure to deliver a training session due to events beyond reasonable control, including but not limited to natural disasters, acts of government, power outages, internet service disruptions, platform outages (including Zoom), labor disputes, or other force majeure events. In the event a training session cannot be delivered as scheduled due to such circumstances, the session will be rescheduled, or Students will be offered the option to rebook for another available session of the same training. No refunds will be issued for technical issues or interruptions caused by the student’s own internet connectivity, hardware, software, or environment, or the student’s failure to properly access the Zoom platform or follow provided instructions. In case of technical issue on the provider’s, the session will be rescheduled.