Technology

37706 readers

255 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

[email protected]

124

Bots dominate internet activity, account for nearly half of all traffic (www.helpnetsecurity.com)

submitted 6 months ago by [email protected] to c/[email protected]

14 comments fedilink hide all child comments

cross-posted from: https://infosec.pub/post/11194362

49.6% of all internet traffic came from bots in 2023, a 2% increase over the previous year, and the highest level Imperva has reported since it began monitoring automated traffic in 2013. For the fifth consecutive year, the proportion of web traffic associated with bad bots grew to 32% in 2023, up from 30.2% in 2022, while traffic from human users decreased to 50.4%. Automated traffic is costing organizations billions (USD) annually due to attacks … More → The post Bots dominate internet activity, account for nearly half of all traffic appeared first on Help Net Security.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 33 points 6 months ago (1 children)

What proportion of the bots were fediverse servers syncing with each other?

[–] [email protected] 41 points 6 months ago (1 children)

Yeah, I'm wondering about how they characterize "bot activity." It seems like "any traffic not proximally related to a user's synchronous activity" is a little too broad.

I'm not sure if fediverse syncing is bot activity. Or my laptop checking for software updates while I'm sleeping. Or my autopay transactions for utility bills.

[–] [email protected] 18 points 6 months ago (1 children)

From the org’s definition of bots, I’d say it’s implicit that bot activity excludes expected communication in an infrastructure, client-server or otherwise. A bot is historically understood as an unexpected, nosy guest poking around a system. A good one might be indexing a website for a search engine. A bad one might be scraping email addresses for spammers.

In any case, none of the examples you give can be reasonably categorized as bots and the full report gives no indication of doing so.

[–] [email protected] 7 points 6 months ago (1 children)

I'd argue that with their definition of bots as "a software application that runs automated tasks over the internet" and later their definition of download bots as "Download bots are automated programs that can be used to automatically download software or mobile apps.", automated software updates could absolutely be counted as bot activity by them.

Of course, if they count it as such, the traffic generated that way would fall into the 17.3% "good bot" traffic and not in the 30.2% "bad bot" traffic.

Looking at their report, without digging too deep into it, I also find it concerning that they seem to use "internet traffic" and "website traffic" interchangeably.

[–] [email protected] 6 points 6 months ago

Yeah, their reporting suffers from not adequately defining what is being measured.