To have something to compare against, we asked the Castle team to generate some real, human mouse interactions, and in each pair of mouse patterns below one is from a bot and one is from a human. In this post, we'll take a look at three types of bot-generated mouse interactions and we'll discuss how these can be automatically detected. This changed the bot-detection problem from simply having to check whether there were any mouse interactions to trying to detect if the interactions looked human or bot-like. Even though it's easy to instruct a headless browser to generate mouse interactions, it's not straightforward to generate human-looking interactions. Things became more complicated with the advent of the headless browser: a scriptable browser that can interact with a web page just like a regular user. If a web event, say a login attempt, was made without any type of mouse or keyboard interaction, then that event was most likely generated by a bot. Real users navigate your site with a mouse and a keyboard (or nowadays, a finger and a touch device), but bots have neither arms nor fingers. In movies, hackers seemingly get into any system by manually guessing the password in real life, bot-generated traffic is behind much of the fraud on the internet.
0 Comments
Leave a Reply. |