The state of application security in 2023
Mar 14, 2023Michael Tremante, David Belson, Sabina Zejnilovic
Summary
This post provides updated insights and trends around mitigated traffic, bot and API traffic, and account takeover attacks for Security Week 2023. It details Cloudflare's growth, handling over 45 million HTTP requests/second on average, and defines key terms like 'Mitigated traffic', 'Bot traffic/automated traffic', and 'API traffic'. The report highlights that 6% of daily HTTP requests are mitigated on average, with DDoS mitigation accounting for 52% and WAF for 41%. HTTP Anomaly is the most frequent layer 7 attack vector mitigated by the WAF, though its share has decreased. Bot management has seen significant investment with improved classification of human vs. bot traffic.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack