tencent cloud

Feedback

Bot Flow Statistics Module

Last updated: 2022-06-24 11:03:09

    Bot flow statistics is a module provided in bot behavior management. This feature identifies malicious users by monitoring and analyzing the traffic characteristics of your user groups.

    Prerequisites

    You have purchased a WAF plan and subscribed to bot behavior management. Meanwhile, you have added a domain name to WAF.

    Protection Configuration

    1. Log in to the WAF console and select Configuration Center > Bot and Application Security on the left sidebar.
    2. On the page that appears, select a target region and click Bot management.
    3. On the bot management page, click in the bot flow statistics module.
    4. On the page displayed, configure different feature metrics.

    Parameter description:

    • Name/Description:
      • Referer type: Number of deduplicated Referers in a session request. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • URL type: Number of deduplicated URLs in a session request. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • User-Agent type: Number of deduplicated User-Agents in a session request. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • Cookie type: Number of deduplicated Cookies in a session request. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • Total sessions: Total number of sessions. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • Average session speed: Average number of sessions per minute. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
      • Session duration: Amount of time a session lasts. In different detection modes, it is used to determine access requests as abnormal when its probability threshold reaches.
    • Mode: The probability thresholds of the metrics vary with different detection modes.
      • If the detection mode is quite strict, the detection rate is higher, but the detection accuracy is lower.
      • If the detection mode is quite loose, the detection rate is lower, but the detection accuracy is higher.
      • The Auto mode is a mode produced by bot behavior management using the historical website traffic patterns. This mode switches from Loose to Strict automatically according to the bot situation of the website.
      • On/Off: It controls whether to enable feature metrics. If one feature metric is disabled, it will not be counted toward the bot score.

    Best Practices

    As the bot flow statistics module is built based on accumulated experience in bot defense, you are recommended to enable this feature regardless of the situation and set the mode to "Auto".

    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support