Resources

Automated attacks against public facing web, mobile and API-based apps deployed on AWS can result in fraud, theft, lost sales, reduced customer confidence and infrastructure cost overruns. These attacks appear to be legitimate transactions, hiding in plain sight, making detection and prevention an ongoing security challenge. Deployed in conjunction with Amazon CloudFront and AWS WAF, CQ botDefense SaaS detects your public facing applications and APIs, then analyzes each transaction using ML-based automation indicators to uncover and block malicious activity.

In this on-demand webinar, you’ll learn how malicious bots target your public facing applications and how you can protect them.

Presenters:
Stephen Mayne, Partner Solutions Architect at AWS
Subbu Iyer, VP of Products at Cequence Security

Join Cequence Security for this exciting webinar highlighting how automated attacks take full advantage of Bulletproof Proxies, a rapidly growing class of infrastructure providers that have taken the concepts of anonymity and availability found in Bulletproof Hosting, and use them to launch and deliver automated bot attacks.

What you’ll learn:

• The rise of Bulletproof Proxies – how they came to exist
• The balancing act between legitimate and malicious use
• Techniques used to mask their identity and location
• Details on large scale attacks targeting financial services and retail sector

Presenter:
Will Glazier

Credit unions and financial services organizations are plagued by automated attacks such as account takeovers and fake account creation. These attacks have many objectives, often targeting APIs instead of web forms or mobile apps. These attacks often lead to secondary objectives resulting in fraud or outright theft. Regardless of the objective, they all have several commonalities: they’re costly, disruptive, and because they appear to be legitimate, they’re extremely difficult to detect using traditional security tools.

In this on-demand webinar, we’ll look at how these attacks work, how the attackers can hide in plain sight, and innovative strategies for catching malicious bots.

Presenter:
Matt Keil
Director of Product Marketing

The Prying-Eye enumeration vulnerability recently discovered in leading web conferencing applications by the CQ Prime research team highlights how APIs used in your public-facing applications provide bad actors with the same ease of use, efficiency and flexibility benefits that APIs bring to the development community. Rather than scripting a web form fill, to launch an attack, bad actors will analyze the web or mobile application to understand the business logic while discovering the APIs in use. Armed with that information, bad actors can then create a bot that will execute an automated attack directly against the APIs. In this session, Shreyans Mehta, CTO, and Co-founder of Cequence Security will share recent details of the Prying-Eye attack and the prevalence of using APIs for automated attacks. He will close with security recommendations and how Cequence Security can help.