Download - How bots impact major onsales [Webinar]
![Page 1: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/1.jpg)
![Page 2: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/2.jpg)
▪Introduction
▪Bots 101
▪BOTS Act and what it covers (and doesn’t cover)
▪How bots can impact your major onsales and associated
mitigation strategies
▪StubHub case study
▪Q&A
![Page 3: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/3.jpg)
Rami Essaid
CEO & Co-founder, Distil Networks
Niels Sodemann
CEO & Co-founder, Queue-it
Distil Networks is the only proactive and precise bot mitigation solution for web applications, mobile, and APIs.
▪ Founded in 2011
▪ 180 employees
▪ 5 offices
▪ $65 million in funding
The use of Queue-it has ensured online fairness during high-demand online events for more than 1.5 billion consumers worldwide.
▪Founded in 2010▪63 employees▪2016 TTA winner of Supplier of the Year
DenmarkSilicon Valley
![Page 4: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/4.jpg)
Awards and Analyst Recognition
The only anti-bot solution to be included
in Gartner’s Online Fraud Detection
Market Guide 2-years running
“Distil’s ability to analyze behavior provides
the best chance of detecting and blocking
bot-driven attacks.”
“Clear innovation compared to
similar services.”2017 WINNER: Best Fraud Prevention
Solution
![Page 5: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/5.jpg)
Bots 101
![Page 6: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/6.jpg)
Good bots
▪ Search engine crawling
▪ Power APIs
▪ Check system connectivity & status
A ‘bot’ is an automated program that runs on the internet
Bad bots
▪ Steal content
▪ Scan for vulnerabilities
▪ Perform fraud etc.Traffic Distribution by Type, 2016
![Page 7: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/7.jpg)
What concerns you most about the impact of bots on your organization’s website(s)?
▪ Website Security
▪ Transaction Fraud
▪ Lost Revenue to Scalpers
▪ Poor Customer Experience
Survey
![Page 8: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/8.jpg)
How are you addressing your bot concerns?
▪ Addressing now
▪ Plan to address this year
▪ Plan to address next year
▪ No plans to address
▪ Don’t know
Survey
![Page 9: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/9.jpg)
The BOTS Act explained
![Page 10: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/10.jpg)
▪ Prohibits the circumvention of a security
measure used to enforce ticket purchasing
limits for an event with an attendance
capacity > 200 pers.
▪ Prohibits the sale of an event ticket
obtained through such a circumvention
violation if the seller participated in, had the
ability to control, or should have known
about it
BOTS Act key prohibitions
![Page 11: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/11.jpg)
▪ Scalping
▪ Sniping
▪ Spinning
20% of traffic bad bots
OWASP Automated Threats relevant to BOTS Act
![Page 12: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/12.jpg)
Ticketing Bots Sophistication
![Page 13: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/13.jpg)
Other legislation
![Page 14: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/14.jpg)
▪ Must Have Protections
Prohibits the circumvention of a security
measure used to enforce ticket purchasing
limits for an event with an attendance capacity
> 200 pers.
Who does it impact? Primary Ticketing.
▪ Federal Trade Commission Audits:
Treats violations as unfair or deceptive acts under the FTC Act. The bill provides authority to the FTC and states to enforce against such violations
![Page 15: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/15.jpg)
▪ Must Have Protections
Prohibits the circumvention of a security
measure used to enforce ticket purchasing
limits for an event with an attendance
capacity > 200 pers.
Who does it impact? Secondary Ticketing.
▪ FTC Audits
Treats violations as unfair or deceptive acts under the FTC Act, provides authority to the FTC and states to enforce against such violations
Prohibits the sale of an event ticket obtained through such a circumvention violation if the seller participated in, had the ability to control, or should have known about it
![Page 16: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/16.jpg)
Can you enforce?
Who does this impact? Venues.
Can you comply? Can you cooperate?
![Page 17: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/17.jpg)
If you aren’t bypassing security measures on a website in order to get
tickets, you aren’t breaking the law.
▪ Doesn’t eliminate the ability to buy & resell tickets obtained legally
▪ Doesn’t address historical relationships between sellers and reseller
▪ Doesn’t make the 40% of tickets not on public sale magically reappear
What the BOTS Act does not address
![Page 18: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/18.jpg)
▪ Bots: scapegoat for a bigger problem in ticketing
▪ Humans + scripts: Cubefarm of people operating
bots with industry experts managing them
▪ 7 years + $25M later, FBI cracks down in 2010
▪ Ken Lowson now a wiseguy turned good
…and then there’s Wiseguys
Source: https://motherboard.vice.com/en_us/article/the-man-
who-broke-ticketmaster
![Page 19: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/19.jpg)
▪ Precise log in, processing thousands of
purchases faster than any human
▪ Fooling CAPTCHA, with huge database
of combinations + operating at
lightning speed
▪ Securing best seats & selling them at a
steep markup for resale to the public
How they did it
Source: U.S. Attorney Office, The Star Ledger
![Page 20: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/20.jpg)
Other ‘wiseguys’ like ShowsOnSale continue to pop up,
historically hard & expensive to prosecute
![Page 21: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/21.jpg)
Why you can’t sell out in 20 minutes
Ticket onsales timeline
It’s not possible to sell out in less
than 2x basket/cart timeout time
More info: https://queue-
it.com/presentation-can-you-sell-out-in-2-
minutes-no-learn-why/
![Page 22: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/22.jpg)
![Page 23: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/23.jpg)
In other words, as a venue, organization or ticketing
software platform, it is still on you to defend against
this fraudulent activity during your major onsales
![Page 24: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/24.jpg)
How bots abuse the logic of online ticket sales
Distil Networks Queue-it Distil Networks
![Page 25: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/25.jpg)
Before onsale: Account Creation
Distil Networks Queue-it Distil Networks
![Page 26: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/26.jpg)
Before onsale: Account Takeover
Distil Networks Queue-it Distil Networks
![Page 27: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/27.jpg)
Account Takeover Attacks
![Page 28: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/28.jpg)
Financial fraud
Targets are accounts at financial or e-commerce services that store users’ banking details. The attackers perform unauthorized withdrawal from bank accounts or fraudulent transactions using the credit/debit cards on file.
This includes virtual currency such as bitcoin, in-game currency, and rewards programs. This is all worth real money.
Account Takeover Attacks: Why?
Spam
Spam can appear in any service feature that accepts user-generated content, including discussion forums, direct messages, and reviews/ratings, degrading platform integrity and brand reputation.
Phishing
Attackers can assume a compromised user’s identity and launch phishing attacks on others in his/her social circle to steal their credentials, personal information, or sensitive data.
![Page 29: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/29.jpg)
Account Takeover Bots Sophistication
![Page 30: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/30.jpg)
Day of onsale / During onsale
Distil Networks Queue-it Distil Networks
![Page 31: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/31.jpg)
Volume
Distil Networks Queue-it Distil Networks
![Page 32: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/32.jpg)
Volume
▪ To achieve this, spinner bots create
many hits
▪ Queue-it can recognize this as
coming from same device and will
block
▪ 50% of blocking during a major
onsale is due to spinner bots
![Page 33: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/33.jpg)
Speed
Distil Networks Queue-it Distil Networks
![Page 34: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/34.jpg)
Speed
▪ Any speed scripted
bots arriving before
the event are placed in
the randomized pre-
event waiting room
before the event
launches
Pre-event queue page Live event queue page
![Page 35: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/35.jpg)
During ticket purchase
Distil Networks Queue-it Distil Networks
![Page 36: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/36.jpg)
Credit card fraud
![Page 37: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/37.jpg)
Multiple purchases, exceeding limits
Distil Networks Queue-it Distil Networks
![Page 38: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/38.jpg)
IP Address
Header & User Agent Information
Cookie Browser
200+ Attributes of data Navigator, WebGL, Plugins, Audio, Video, etc.
Tamper proofing layer
Distil Hi-Def Fingerprint
Identification Must Go Beyond the IP Address...
![Page 39: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/39.jpg)
StubHub Case Study
![Page 40: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/40.jpg)
StubHub Case Study
Account Takeover and Fraud
“Distil helped us greatly reduce
transaction fraud and account
takeovers.”
Marty Boos
CIO, StubHub
![Page 41: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/41.jpg)
StubHub Case Study
Ticket Scraping
“Competitive data mining for
ticket prices and inventory
information was a constant
threat.”
Marty Boos
CIO, StubHub
![Page 42: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/42.jpg)
StubHub Case Study
Skewed Conversion Tracking
“The number of conversions were
greatly deflated because of bad bot
traffic. Now that we’re filtering bad
bot traffic out, we’re able to see
what the real data is and make
decisions based on real visitors.”
Marty Boos
CIO, StubHub
![Page 43: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/43.jpg)
StubHub Case Study Conclusions
In reference to the before, wait and buyer journey:
“I like this multi-layered approach” George Loyer, Director
Technical Operations, StubHub
Distil Networks Queue-it Distil Networks
![Page 44: How bots impact major onsales [Webinar]](https://reader031.vdocument.in/reader031/viewer/2022030307/58e5fc2a1a28ab09478b59d3/html5/thumbnails/44.jpg)
Free trial Free trial
www.distilnetworks.com/trial www.queue-it.com/free-trial