Web bot detection evasion using generative adversarial networks

Authors: Iliou, C., Kostoulas, T., Tsikrika, T., Katos, V., Vrochidis, S. and Kompatsiaris, I.

Journal: Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience, CSR 2021

Pages: 115-120

DOI: 10.1109/CSR51186.2021.9527915

Abstract:

Web bots are programs that can be used to browse the web and perform automated actions. These actions can be benign, such as web indexing and website monitoring, or malicious, such as unauthorised content scraping and scalping. To detect bots, web servers consider bots' fingerprint and behaviour, with research showing that techniques that examine the visitor's mouse movements can be very effective. In this work, we showcase that web bots can leverage the latest advances in machine learning to evade detection based on their mouse movements and touchscreen trajectories (for the case of mobile web bots). More specifically, the proposed web bots utilise Generative Adversarial Networks (GANs) to generate images of trajectories similar to those of humans, which can then be used by bots to evade detection. We show that, even if the web server is aware of the attack method, web bots can generate behaviours that can evade detection.

https://eprints.bournemouth.ac.uk/36301/

Source: Scopus

Web Bot Detection Evasion Using Generative Adversarial Networks

Authors: Iliou, C., Kostoulas, T., Tsikrika, T., Katos, V., Vrochidis, S. and Kompatsiaris, I.

Journal: PROCEEDINGS OF THE 2021 IEEE INTERNATIONAL CONFERENCE ON CYBER SECURITY AND RESILIENCE (IEEE CSR)

Pages: 115-120

DOI: 10.1109/CSR51186.2021.9527915

https://eprints.bournemouth.ac.uk/36301/

Source: Web of Science (Lite)

Web bot detection evasion using generative adversarial networks

Authors: Iliou, C., Kostoulas, T., Tsikrika, T., Katos, V., Vrochidis, S. and Kompatsiaris, I.

Conference: 2021 IEEE International Conference on Cyber Security and Resilience (CSR)

Pages: 115-120

ISBN: 9781665402859

Abstract:

Web bots are programs that can be used to browse the web and perform automated actions. These actions can be benign, such as web indexing and website monitoring, or malicious, such as unauthorised content scraping and scalping. To detect bots, web servers consider bots' fingerprint and behaviour, with research showing that techniques that examine the visitor's mouse movements can be very effective. In this work, we showcase that web bots can leverage the latest advances in machine learning to evade detection based on their mouse movements and touchscreen trajectories (for the case of mobile web bots). More specifically, the proposed web bots utilise Generative Adversarial Networks (GANs) to generate images of trajectories similar to those of humans, which can then be used by bots to evade detection. We show that, even if the web server is aware of the attack method, web bots can generate behaviours that can evade detection.

https://eprints.bournemouth.ac.uk/36301/

Source: BURO EPrints