Credential Stuffing Attacks! What is it and how you can protect your Web Application!

No ratings

Presented at Elbsides 2019 by

Samy Makki

Every web application will see them on their site… Bots. But what are they doing? WebScraping, Content Aggregation, Credential Stuffing and DDoS Attacks are some examples of bad bot attacks. But there are also good bots like search engine bots, SEO and Marketing Bots and Partner Bots. So, how can we detect and mitigate them? Why is simply IP Blocking and Rate Limiting not working anymore?In this talk I will especially talk about attacks targeting the login of a site. Learn about how a typical credential stuffing attack works and ways how to detect and mitigate them.