Tag Info

New answers tagged

1

As everyone has already answered, it's not possible to detect bots via browser fingerprinting alone. ShieldSquare, being bot detection company we spend most of the time with bots, I would say detection of bots is possible, along with JS device fingerprint few more things would be considered: User Behavior [You can analyse what the user is doing on the ...


1

The nature of an exploit using an image often is a buffer overrun, for instance: Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987) To defend against such an attack, all practices and techniques to detect attacks on the stack and heap of your image processing programs will help. Rigorously checking the source code is the first ...


3

Given that the VPN headers around each packet will take up space and then disappear, they could be looking at packet size vs MTU to come up with a way of guessing (it would be a wild guess) that the user is behind a VPN because their packets are consistently smaller than other streams. An even wilder guess would be that they are looking at round trip time ...


5

Finding out that a user is using a VPN service provider isn't that difficult. Most of them have static IP addresses for their exit gateways, so it could just be using a list of known IP addresses to identify VPNs. And even when they don't have a list, a simple reverse DNS lookup might tell them that the IP has a hostname which is obviously a VPN provider and ...


1

Trying to detect malicious URLs is a difficult and in many ways impossible game to win, just like trying to detect malware in executables. IF you are trying to protect your network from malicious URLs, there are threat feeds available, which are useful, be as others have stated, domains are cheap and easy to throw away. The strongest way to prevent ...


1

Domain names are cheap. Attackers are quite happy to register a domain to use in a single campaign. At some point thereafter the domain will be red-flagged by reputation services, but by that time the attacker has moved onto the next one.



Top 50 recent answers are included