Are you human?

July 2012 Cyber Security

Imperva has released its June Hacker Intelligence report, ‘A CAPTCHA in the Rye’, which examines CAPTCHA security concerns. Computer-assisted tools and crowd sourcing can easily bypass traditional anti-spam solutions, forcing CAPTCHAs to evolve to address these techniques.

A CAPTCHA, or a Completely Automated Public Turing Test to tell Computers and Humans Apart, is a common security measure used to distinguish human users from automated browsing applications, helping to prevent automated tools from abusing online services. Hackers have developed numerous methods to bypass CAPTCHAs, such as computer-assisted tools and crowd sourcing, forcing CAPTCHA providers to constantly monitor and innovate their services.

“CAPTCHA security, like many other security segments, is a battle of innovation between hackers and security professionals,” said Amichai Shulman, CTO, Imperva. “CAPTCHA security must be balanced against a positive user experience, but can readily be improved by deploying anti-automation solutions to help prevent hackers from employing anti-CAPTCHA tools.”

“A CAPTCHA in the Rye” provides contextual analysis and real-world case studies focused on CAPTCHA solutions, including:

Methods for bypassing CAPTCHA – Imperva highlights two main approaches hackers take to solve CAPTCHAs: Computer-assisted tools based on Optical Character Recognition or Machine Learning technologies and crowd sourcing CAPTCHA solving to third-party agents.

Emerging CAPTCHA technology – Novel approaches to CAPTCHA implementation include delivering more difficult CAPTCHAs to suspicious users, integrating simple riddles and contextual semantics, all of which are more difficult for automated tools to solve.

Lessons learned from real world deployments – Imperva analysed a series of case studies focused on bypassing CAPTCHAs to identify common trends, such as incomplete browser headers and high rate requests per minute.

Imperva advises anti-automation solutions to bolster CAPTCHA defences with traffic-based automation detection, behavioural analysis, content analysis and blacklists.

To download the full report, please visit: http://www.imperva.com/download.asp?id=206





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Exploiting the global pandemic
Issue 7 2020 , Cyber Security
Cyber criminals targeting remote work to gain access to enterprise networks and critical data reports FortiGuard Labs.

Read more...
Integrated security is key to Huawei Mobile Services
Issue 7 2020 , Cyber Security
To ensure sufficient mobile device security, the technology giant incorporates security into its chip, device and cloud capabilities.

Read more...
Cybersecurity becomes key enabler of sustainable business growth
Issue 7 2020 , Cyber Security
The adoption of rushed digital transformation strategies has left many facing unintended complexities and challenges.

Read more...
Challenges healthcare is facing
Issue 6 2020 , Cyber Security
The healthcare industry has been forever changed by digital transformation, but cybercriminals are targeting the healthcare sector now more than ever.

Read more...
Secure IoT devices and networks
Issue 6 2020, Technews Publishing , Cyber Security
Check Point Software’s IoT Protect solution secures IoT devices and networks against the most advanced cyber-attacks.

Read more...
SentinelOne Protects the AA
Issue 6 2020 , Cyber Security
National provider of 24-hour motorist assistance stays on the road thanks to accelerated, AI-powered threat prevention, detection and response.

Read more...
Protecting database information
Issue 6 2020 , Cyber Security
SearchInform has officially released Database Monitor, a solution for the protection of information stored in databases.

Read more...
Work from home securely
Issue 5 2020 , Cyber Security
First Consulting provides enterprise-level IT security to working-from-home employees at more than 40 South African organisations.

Read more...
Agility, meticulous alignment and testing
Issue 5 2020 , Cyber Security
Data loss can put the nails in the coffin for unprepared businesses. Investing in cyber resilience is key to succeed in the age of digital transformation.

Read more...
Cybersecurity comment: A holistic approach to threat vulnerability
Issue 5 2020 , Cyber Security
Any organisation, whether large or small, public or private, should follow an established framework in order to protect itself against cyber threats.

Read more...