
4/5/2011 · Matthew Prince
What this post added
This post details the foundational approach of building a distributed security network that learns from attacks across its user base to improve protection for all sites, focusing on analyzing log data for anomalies like high 404 rates, crawler behavior, and known attack signatures, while also scoring legitimate user behavior to minimize false positives.