Today, Kasada unleashed the latest evolution of its bot defense platform. Essential with this launch is always evolving protection and securing the authenticity of web traffic data by forcing attackers to run their code in real time, in Kasada’s environment. A primary reason for this is legacy defenses are easily tricked by bots using fake data to to masquerade as legitimate human users.
What does Ocean’s 11 have to do with defending against online attacks?
There’s a famous scene in the 2001 heist film “Ocean’s 11” when the casino manager Terry Benedict (Andy Garcia) realizes he’s being robbed. It’s a busy night in Las Vegas, and the security team is monitoring the casino vault’s video feed. Everything appears normal… then Benedict’s phone rings. The casino’s vault is being emptied at that very moment. How? Danny Ocean’s crew (George Clooney) is feeding fake video footage to the security room. As proof, the monitors flicker briefly with the real footage - two bound guards and robbers with bags of money.
The scenario depicted in “Ocean’s 11” is not a Hollywood fantasy but a daily reality in the world of cybersecurity. Online attackers, akin to Danny Ocean’s crew, manipulate signals to deceive security systems, infiltrating networks and compromising data.
Falsifying Data to Trick Anti-Bot Detection
Today’s blog highlights the shocking ease with which bad actors can bypass cybersecurity defenses by sending false signals, rendering even the most sophisticated detections useless.
Kasada works with the world’s biggest retail, hospitality, and eCommerce brands. And we are continuously surprised that most are unaware of their legacy bot defense solution’s fatal flaw: It’s easily tricked by adversaries who falsify data to fool the system. No matter how sophisticated, the security detections will be bypassed and exploited if the data collected is faked - and the system can’t tell. A pretty traffic dashboard that shows no problems is that fake casino video feed; strip it away, and the humans are actually bots in disguise.
