Resources

Bulletproof Proxies have taken the concepts of anonymity and availability found in Bulletproof Hosting and extended them to the automated bot attack delivery infrastructure by using large networks of Residential Proxies that mask identity and location. Bulletproof Proxies allow bad actors to distribute their attacks across legitimate user locations making detection and prevention difficult.

This session will cover the following topics:

• The rise of Bulletproof Proxies – how they came to exist
• The balancing act between legitimate and malicious use
• Techniques used to mask their identity and location
• Details on large scale attacks targeting financial services and retail sector

The Prying-Eye enumeration vulnerability recently discovered in leading web conferencing applications by the CQ Prime research team highlights how APIs used in your public-facing applications provide bad actors with the same ease of use, efficiency and flexibility benefits that APIs bring to the development community. Rather than scripting a web form fill, to launch an attack, bad actors will analyze the web or mobile application to understand the business logic while discovering the APIs in use. Armed with that information, bad actors can then create a bot that will execute an automated attack directly against the APIs. In this session, Shreyans Mehta, CTO, and Co-founder of Cequence Security will share recent details of the Prying-Eye attack and the prevalence of using APIs for automated attacks. He will close with security recommendations and how Cequence Security can help.

Application security, defined as preventing malicious automated attacks which appear to be legitimate, or syntactically correct and target your public-facing web, mobile, and API-based applications is an often overlooked element of your cloud-native security stack.

Shreyans Mehta, co-founder and CTO of Cequence Security, dives deep into application security and how cloud-native tools such as Envoy and Prometheus bake application security into your Kubernetes deployments.