4 ms·
Authentication is certainly a scenario I think you'd want to monitor for brute force attacks? Sure IG gets 1000's+ requests a second, but they shouldn't be get
by penagwin 7y ago
Authentication is certainly a scenario I think you'd want to monitor for brute force attacks?
Sure IG gets 1000's+ requests a second, but they shouldn't be getting 1000's+ requests per second per user - especially on a login route.
I monitor 400 requests on our website - A massive spike in those would warrant investigation.
- ilikehurdles 7y agoI'm sure IG gets several orders of magnitude more than 1000s of requests per second. Even if a dashboard existed visualizing excess request traffic per route per user, when you're talking about this kind of request volume, there is an indexing lag + a reporting lag + alerting lag (assuming there is alerting on this specific scenario on top of the dashboard) + human or automated response lag. It sounds like this attack could be completed in minutes rather than hours or days, it's feasible that it would have succeeded well before anyone got around to mitigating it.
- davinic 7y agoBut once you know that this is a specific attack surface, it's far easier to limit the surface (fix the problem) rather than build a dashboard that a human has to monitor perpetually.