Protecting APIs from abuse using sequence learning and variable order Markov chains
Sep 12, 2024Peter Foster
Summary
This post details the technical implementation of Sequence Analytics for API abuse protection. It introduces the concept of API sessions and sequences, and explains how Markov chains and variable order Markov chains (VOMCs) are used to model sequential API request behavior. The post highlights the use of credible intervals for estimating probabilities and addresses the limitations of fixed-order Markov chains. It also introduces the concept of VOMCs to handle variable sequence lengths and improve the accuracy of abuse detection.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack