DFIR Stream 0xE скачать в хорошем качестве

DFIR Stream 0xE

"Identifying Fraudulent CAPTCHA Solvers Using Network Propagation Analysis" by Martynas Buožis and Umberto Fontana, Amadeus IT Group /Telecom SudParis. Abstract: CAPTCHA Farms have become essential tools for malicious actors to circumvent bot protection mechanisms, facilitating fraud such as inventory denial and SMS pumping. These services use proxies to replicate the IP address and fingerprint of the bot client, evading detection through conventional application-layer analyses. Additionally, the CAPTCHA solving times achieved by these farms are indistinguishable from those of legitimate users, posing a significant challenge to current detection methods. We propose a novel approach to detect the use of CAPTCHA Farms by leveraging network measurements. Our method analyzes the propagation times of the site key and CAPTCHA token exchanged between the client, the CAPTCHA provider, and the server. By examining these timings and correlating them with the physical distances suggested by the client’s IP address and the known locations of the other two parties, we aim to statistically infer the plausibility of the observed delays. We present preliminary results from our ongoing experiments and the development of our statistical testing methodology. Our focus is on gathering feedback from the community regarding our approach, its practical applicability, and potential implementation challenges. More Info: https://www.acfti.org/news-events/dfi...