Gain Bot Insights – Bot Risk Scanner Introduced to Splunk Marketplace

Twenty-five percent of all internet traffic today is generated by bad bots. Unfortunately, many organizations cannot make a definitive distinction between good and bad bots. This leaves its applications vulnerable to malicious threats posed by these automated programs.

While good bots accelerate business processes, such as data collection and decision-making, bad bots steal data and disrupt services. They must be detected and blocked to prevent attacks. However, blocking bad bots isn’t a simple task, as these malicious programs are constantly evolving in their sophistication and ability to mimic human behavior to easily bypass security challenges. 

What organizations require to stop bad bots from harming their web applications is a dedicated, sophisticated tool that can analyze incoming traffic and differentiate between humans and good and bad bots, including sophisticated and evolved bots. 

Introducing Radware’s Bot Risk Scanner

Radware’s Bot Risk Scanner (BRS) is a freemium tool that is exclusively for Splunk and detects bots based on information in the SIEM (Security Information and Event Management). It provides insight into the health of incoming traffic. The in-depth analysis helps you determine what actions to take to prevent malicious attacks on your applications. This tool is a monitor-only service plugged on top of the SIEM logs in Splunk and categorizes incoming traffic as a human or bot according to Radware’s collective bot intelligence.

Why Should You Consider Radware Bot Risk Scanner?

It is usually after an attack has happened that businesses even know an attack has occurred. If bot masters deploy low and slow attacks that are carefully architected to go unnoticed, it might take months to identify a breach or an attack.

Bot masters also key in on noteworthy shopping events, like Black Friday and Christmas, to hide under the guise of human-looking traffic. But they’re not there to shop, but to carry out malicious attacks that damage your reputation and hurt your customers. This includes Identity theft, Account Takeover (ATO), Scalping, Scraping, and others.

Radware’s Bot Risk Scanner allows you to be proactive in your security defenses by looking for malicious attacks by monitoring incoming traffic through SIEM logs. With Radware Bot Risk Scanner, you get detailed insights about the malicious bots in your Splunk application. The Bot Risk dashboard provides the following key, rich insights:

• Total requests to your application,
• Bad bot requests are detected hourly,
• Bot classification,
• Average attack duration,
• Crawler and aggregator stats,
• Origin of attack instances based on country, city, ISP and domain,
• Top user agents used by bots,
• URLs impacted by bot attacks,
• Referrer URLs used by bots, and
• Attacks based on IP address.

All of this is free for up to 2 million incoming internet sessions per month. With no additional integrations or changes to your infrastructure required to implement Radware Bot Risk Scanner, it is a perfect solution for monitoring your traffic in real-time and staying ahead of attackers.  

 

Installing the Radware Bot Risk Scanner is Easy

First, you’ll need to have a Splunk Enterprise or Splunk Cloud account. Then simply install the Radware Bot Risk Scanner app from Splunk and follow the integration guidelines. You’ll be using Radware Bot Risk Scanner in no time.

What are the benefits of upgrading from the freemium plan?

Radware Bot Risk Scanner gives you a free analysis of your incoming traffic for up to 2 million http/s requests each month. Upgrading to the full-featured Radware Bot Manager (RBM) that is initially available as a free POC to try provides you the following:

• Comprehensive bot detection by utilizing more traffic and user behavioral parameters/signals, including sophisticated machine learning (ML) algorithms.
• Radware’s wide range of mitigation options (the widest in the industry), including Crypto Challenge Mitigation.
• Protection against all forms of ATO (credential stuffing and brute force attacks), denial of inventory, DDoS, ad and payment fraud web scraping, and help safeguarding and growing your online operations.
• Access to the Radware Bot Defense Lab’s team of experienced data analysts who will provide your organization with real-time threat monitoring, analysis, investigation and responses to malicious threats. Along with that, you will receive customized, weekly reports.
• Dedicated API protection with API flow control to protect machine-to-machine and IoT endpoints, an API client SDK to secure machine-to-machine APIs and authentication flow analysis to protect your APIs from ATO attacks.

For More Information

To learn more about Radware Bot Risk Scanner or to upgrade from the freemium plan, contact Radware’s bot management experts at brs@radware.com.