QuestionQ24

VerifiedWeb application and API security with botnet mitigation

A FortiWeb administrator needs to stop coordinated scraping traffic originating from several IP addresses, with each making only a few requests so that thresholds do not trigger.

Which tactic should the administrator use to identify botnets through shared behavioral signals rather than traffic volume?

Explanation

FortiWeb Bot Mitigation can detect automated clients through behavioral analysis and biometric-based detection. Its fingerprint recognition evaluates browser and client characteristics, while JavaScript-collected client events and traits help distinguish bots from human users; this remains effective when individual IP addresses do not generate enough requests to exceed a volume threshold. Fortinet: Configuring biometrics based detection

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!