1<!DOCTYPE html> 2<html lang="zh-CN"> 3<head> 4 <meta charset="UTF-8"> 5<meta name="viewport" content="width=device-width"> 6<meta name="theme-color" content="#222"><meta name="generator" content="Hexo 6.3.0"> 7 8 <link rel="apple-touch-icon" sizes="180x180" href="/images/apple-touch-icon-next.png"> 9 <link rel="icon" type="image/png" sizes="32x32" href="/images/favicon-32x32-next.png"> 10 <link rel="icon" type="image/png" sizes="16x16" href="/images/favicon-16x16-next.png"> 11 <link rel="mask-icon" href="/images/logo.svg" color="#222"> 12 13<link rel="stylesheet" href="/css/main.css"> 14 15<link rel="stylesheet" href="https://fonts.lug.ustc.edu.cn/css?family=Lato:300,300italic,400,400italic,700,700italic&display=swap&subset=latin,latin-ext"> 16 17<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css" integrity="sha256-HtsXJanqjKTc8vVQjO4YMhiqFoXkfBsjBWcX91T1jr8=" crossorigin="anonymous"> 18 <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/animate.css/3.1.1/animate.min.css" integrity="sha256-PR7ttpcvz8qrF57fur/yAx1qXMFJeJFiA6pSzWi0OIE=" crossorigin="anonymous"> 19 <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/pace/1.2.4/themes/blue/pace-theme-bounce.css"> 20
20<script src="https://cdnjs.cloudflare.com/ajax/libs/pace/1.2.4/pace.min.js" integrity="sha256-gqd7YTjg/BtfqWSwsJOvndl0Bxc8gFImLEkXQT8+qj0=" crossorigin="anonymous"></script>
20 21
22<script class="next-config" data-name="main" type="application/json">{"hostname":"powerlzy.github.io","root":"/","images":"/images","scheme":"Pisces","darkmode":false,"version":"8.15.1","exturl":false,"sidebar":{"position":"left","display":"post","padding":18,"offset":12},"copycode":{"enable":true,"style":"flat"},"bookmark":{"enable":false,"color":"#222","save":"auto"},"mediumzoom":false,"lazyload":false,"pangu":false,"comments":{"style":"tabs","active":null,"storage":true,"lazyload":false,"nav":null},"stickytabs":false,"motion":{"enable":true,"async":false,"transition":{"menu_item":"fadeInDown","post_block":"fadeIn","post_header":"fadeInDown","post_body":"fadeInDown","coll_header":"fadeInLeft","sidebar":"fadeInUp"}},"prism":false,"i18n":{"placeholder":"æç´¢...","empty":"æ²¡ææ¾å°ä»»ä½æç´¢ç»æï¼${query}","hits_time":"æ¾å° ${hits} 个æç´¢ç»æï¼ç¨æ¶ ${time} 毫ç§ï¼","hits":"æ¾å° ${hits} 个æç´¢ç»æ"},"path":"/search.xml","localsearch":{"enable":true,"trigger":"auto","top_n_per_article":1,"unescape":false,"preload":false}}</script>
22<script src="/js/config.js"></script>
22 23 24 <meta name="description" content="卿¬ç¯æç« 䏿们å°è®¨è®ºDataDomeå ¬å¸[1]æ¯å¦ä½å©ç¨åºäºæµçå¼å¸¸å¼æ£æµå SliceLine æ¥å¿«éå®å ¨å°çæå¤§éå¯ç¨äºé»æ¢æ¶ææµéçè§å/ç¾åãè½ç¶æºå¨å¦ä¹ (ML)ç使ç¨åå¾è¶æ¥è¶æ®éï¼ä½å¨å®å ¨ç¯å¢ä¸è§åä»ç¶å¾éè¦ãäºå®ä¸ï¼å ¬å¸å·²ç»æèµäºå¤§éææçè§å弿ï¼è½å¤å¿«éè¯ä¼°å¤§éè§åãæ¤å¤ï¼è§åéå¸¸æ´æ¹ä¾¿å建ãæä½åè§£éï¼å æ¤å¨MLæ¹æ³ä¹å¤ä»ç¶å¾æä»·å¼ã è½ç¶ SliceLine æå设计ç¨äº"> 25<meta property="og:type" content="article"> 26<meta property="og:title" content="æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks"> 27<meta property="og:url" content="https://powerlzy.github.io/posts/A8WZ9F/index.html"> 28<meta property="og:site_name" content="PowerLZY's Blog"> 29<meta property="og:description" content="卿¬ç¯æç« 䏿们å°è®¨è®ºDataDomeå ¬å¸[1]æ¯å¦ä½å©ç¨åºäºæµçå¼å¸¸å¼æ£æµå SliceLine æ¥å¿«éå®å ¨å°çæå¤§éå¯ç¨äºé»æ¢æ¶ææµéçè§å/ç¾åãè½ç¶æºå¨å¦ä¹ (ML)ç使ç¨åå¾è¶æ¥è¶æ®éï¼ä½å¨å®å ¨ç¯å¢ä¸è§åä»ç¶å¾éè¦ãäºå®ä¸ï¼å ¬å¸å·²ç»æèµäºå¤§éææçè§å弿ï¼è½å¤å¿«éè¯ä¼°å¤§éè§åãæ¤å¤ï¼è§åéå¸¸æ´æ¹ä¾¿å建ãæä½åè§£éï¼å æ¤å¨MLæ¹æ³ä¹å¤ä»ç¶å¾æä»·å¼ã è½ç¶ SliceLine æå设计ç¨äº"> 30<meta property="og:locale" content="zh_CN"> 31<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615386.png"> 32<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615490.png"> 33<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615644.png"> 34<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615865.png"> 35<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615937.png"> 36<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141840304.png"> 37<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615091.png"> 38<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141842771.png"> 39<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141843904.png"> 40<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141843063.png"> 41<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615405.png"> 42<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141841348.png"> 43<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615688.png"> 44<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615700.png"> 45<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615368.png"> 46<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615725.png"> 47<meta property="og:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615075.png"> 48<meta property="article:published_time" content="2023-05-14T08:15:45.987Z"> 49<meta property="article:modified_time" content="2023-05-14T11:45:56.820Z"> 50<meta property="article:author" content="lzy"> 51<meta property="article:tag" content="å·¥ä¸è½å°"> 52<meta property="article:tag" content="ä¸å¡å®å ¨"> 53<meta property="article:tag" content="APIå®å ¨"> 54<meta property="article:tag" content="BlackHat"> 55<meta property="article:tag" content="Distributed Bot Attacks"> 56<meta name="twitter:card" content="summary"> 57<meta name="twitter:image" content="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615386.png"> 58 59 60<link rel="canonical" href="https://powerlzy.github.io/posts/A8WZ9F/"> 61 62 63
64<script class="next-config" data-name="page" type="application/json">{"sidebar":"","isHome":false,"isPost":true,"lang":"zh-CN","comments":true,"permalink":"https://powerlzy.github.io/posts/A8WZ9F/","path":"posts/A8WZ9F/","title":"æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks"}</script>
64 65
66<script class="next-config" data-name="calendar" type="application/json">""</script>
66 67<title>æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks | PowerLZY's Blog</title> 68 69 70 71 72 73 74 75 76 77 <noscript> 78 <link rel="stylesheet" href="/css/noscript.css"> 79 </noscript> 80</head> 81 82<body itemscope itemtype="http://schema.org/WebPage" class="use-motion"> 83 <div class="headband"></div> 84 85 <main class="main"> 86 <div class="column"> 87 <header class="header" itemscope itemtype="http://schema.org/WPHeader"><div class="site-brand-container"> 88 <div class="site-nav-toggle"> 89 <div class="toggle" aria-label="åæ¢å¯¼èªæ " role="button"> 90 <span class="toggle-line"></span> 91 <span class="toggle-line"></span> 92 <span class="toggle-line"></span> 93 </div> 94 </div> 95 96 <div class="site-meta"> 97 98 <a href="/" class="brand" rel="start"> 99 <i class="logo-line"></i> 100 <p class="site-title">PowerLZY's Blog</p> 101 <i class="logo-line"></i> 102 </a> 103 <p class="site-subtitle" itemprop="description">æ¬å客主è¦ç¨äºè®°å½ä¸ªäººå¦ä¹ ç¬è®°ï¼æµè¯é¶æ®µï¼</p> 104 </div> 105 106 <div class="site-nav-right"> 107 <div class="toggle popup-trigger" aria-label="æç´¢" role="button"> 108 <i class="fa fa-search fa-fw fa-lg"></i> 109 </div> 110 </div> 111</div> 112 113 114 115<nav class="site-nav"> 116 <ul class="main-menu menu"><li class="menu-item menu-item-home"><a href="/" rel="section"><i class="fa fa-home fa-fw"></i>é¦é¡µ</a></li><li class="menu-item menu-item-about"><a href="/about/" rel="section"><i class="fa fa-user fa-fw"></i>å ³äº</a></li><li class="menu-item menu-item-tags"><a href="/tags/" rel="section"><i class="fa fa-tags fa-fw"></i>æ ç¾</a></li><li class="menu-item menu-item-categories"><a href="/categories/" rel="section"><i class="fa fa-th fa-fw"></i>åç±»</a></li><li class="menu-item menu-item-archives"><a href="/archives/" rel="section"><i class="fa fa-archive fa-fw"></i>彿¡£</a></li> 117 <li class="menu-item menu-item-search"> 118 <a role="button" class="popup-trigger"><i class="fa fa-search fa-fw"></i>æç´¢ 119 </a> 120 </li> 121 </ul> 122</nav> 123 124 125 126 <div class="search-pop-overlay"> 127 <div class="popup search-popup"><div class="search-header"> 128 <span class="search-icon"> 129 <i class="fa fa-search"></i> 130 </span> 131 <div class="search-input-container"> 132 <input autocomplete="off" autocapitalize="off" maxlength="80" 133 placeholder="æç´¢..." spellcheck="false" 134 type="search" class="search-input"> 135 </div> 136 <span class="popup-btn-close" role="button"> 137 <i class="fa fa-times-circle"></i> 138 </span> 139</div> 140<div class="search-result-container no-result"> 141 <div class="search-result-icon"> 142 <i class="fa fa-spinner fa-pulse fa-5x"></i> 143 </div> 144</div> 145 146 </div> 147 </div> 148 149</header> 150 151 152 <aside class="sidebar"> 153 154 <div class="sidebar-inner sidebar-nav-active sidebar-toc-active"> 155 <ul class="sidebar-nav"> 156 <li class="sidebar-nav-toc"> 157 æç« ç®å½ 158 </li> 159 <li class="sidebar-nav-overview"> 160 ç«ç¹æ¦è§ 161 </li> 162 </ul> 163 164 <div class="sidebar-panel-container"> 165 <!--noindex--> 166 <div class="post-toc-wrap sidebar-panel"> 167 <div class="post-toc animated"><ol class="nav"><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">ä¸ã说æ</span></a></li><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">äºãæå¨æ£æµå黿¢åå¸å¼æ»å»</span></a><ol class="nav-child"><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">2.1 æ£æµæµéå³°å¼</span></a></li><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">2.2 æ·±å ¥äºè§£ä¸ååæ®µ</span></a></li><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">2.3 è§å¯ä¸ä¸ªè§å</span></a></li></ol></li><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">ä¸ãä½¿ç¨ 168Slicelineæ£æµå黿¢åå¸å¼æ»å»</span></a><ol class="nav-child"><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">3.1 Sliceline 说æ</span></a></li><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">3.2 åå¸å¼æ»å»çåºç¨</span></a></li><li class="nav-item nav-level-4"><a class="nav-link"><span class="nav-text">3.3 169æ¡ä¾åæï¼åæ®å¡«å æ»å»è¢«Sliceline黿¢</span></a></li></ol></li><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">åãç»è®º</span></a></li><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">åèæç®</span></a></li><li class="nav-item nav-level-3"><a class="nav-link"><span class="nav-text">ç¸å ³é¾æ¥</span></a></li></ol></div> 170 </div> 171 <!--/noindex--> 172 173 <div class="site-overview-wrap sidebar-panel"> 174 <div class="site-author animated" itemprop="author" itemscope itemtype="http://schema.org/Person"> 175 <img class="site-author-image" itemprop="image" alt="lzy" 176 src="/images/cat_mac.jpg"> 177 <p class="site-author-name" itemprop="name">lzy</p> 178 <div class="site-description" itemprop="description">ç¸æ¯å°è¾¾çå°æ¹ï¼åè¡ç人æ´éè¦ï¼</div> 179</div> 180<div class="site-state-wrap animated"> 181 <nav class="site-state"> 182 <div class="site-state-item site-state-posts"> 183 <a href="/archives/">
184 <span class="site-state-item-count">267</span> 185 <span class="site-state-item-name">æ¥å¿</span> 186 </a> 187 </div> 188 <div class="site-state-item site-state-categories"> 189 <a href="/categories/"> 190 <span class="site-state-item-count">57</span> 191 <span class="site-state-item-name">åç±»</span></a> 192 </div> 193 <div class="site-state-item site-state-tags"> 194 <a href="/tags/"> 195 <span class="site-state-item-count">77</span> 196 <span class="site-state-item-name">æ ç¾</span></a> 197 </div> 198 </nav> 199</div> 200 <div class="links-of-author animated"> 201 <span class="links-of-author-item"> 202 <a href="https://github.com/PowerLZY" title="GitHub â https://github.com/PowerLZY" rel="noopener me" target="_blank"><i class="fab fa-github fa-fw"></i>GitHub</a> 203 </span> 204 <span class="links-of-author-item"> 205 <a href="mailto:[email protected]" title="E-Mail â mailto:[email protected]" rel="noopener me" target="_blank"><i class="fa fa-envelope fa-fw"></i>E-Mail</a> 206 </span> 207 </div> 208 <div class="cc-license animated" itemprop="license"> 209 <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/zh-CN" class="cc-opacity" rel="noopener" target="_blank"><img src="https://cdnjs.cloudflare.com/ajax/libs/creativecommons-vocabulary/2020.11.3/assets/license_badges/small/by_nc_sa.svg" alt="Creative Commons"></a> 210 </div> 211 212 </div> 213 </div> 214 <div class="back-to-top animated" role="button" aria-label="è¿åé¡¶é¨"> 215 <i class="fa fa-arrow-up"></i> 216 <span>0%</span> 217 </div> 218 </div> 219 220 221 </aside> 222 223 224 </div> 225 226 <div class="main-inner post posts-expand"> 227 228 229 230 231 232<div class="post-block"> 233 234 235 236 <article itemscope itemtype="http://schema.org/Article" class="post-content" lang="zh-CN"> 237 <link itemprop="mainEntityOfPage" href="https://powerlzy.github.io/posts/A8WZ9F/"> 238 239 <span hidden itemprop="author" itemscope itemtype="http://schema.org/Person"> 240 <meta itemprop="image" content="/images/cat_mac.jpg"> 241 <meta itemprop="name" content="lzy"> 242 </span> 243 244 <span hidden itemprop="publisher" itemscope itemtype="http://schema.org/Organization"> 245 <meta itemprop="name" content="PowerLZY's Blog"> 246 <meta itemprop="description" content="ç¸æ¯å°è¾¾çå°æ¹ï¼åè¡ç人æ´éè¦ï¼"> 247 </span> 248 249 <span hidden itemprop="post" itemscope itemtype="http://schema.org/CreativeWork"> 250 <meta itemprop="name" content="æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks | PowerLZY's Blog"> 251 <meta itemprop="description" content=""> 252 </span> 253 <header class="post-header"> 254 <h1 class="post-title" itemprop="name headline"> 255 æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks 256 </h1> 257 258 <div class="post-meta-container"> 259 <div class="post-meta"> 260 <span class="post-meta-item"> 261 <span class="post-meta-item-icon"> 262 <i class="far fa-calendar"></i> 263 </span> 264 <span class="post-meta-item-text">å表äº</span> 265 266 267 <time title="å建æ¶é´ï¼2023-05-14 16:15:45 / ä¿®æ¹æ¶é´ï¼19:45:56" itemprop="dateCreated datePublished" datetime="2023-05-14T16:15:45+08:00">2023-05-14</time> 268 </span> 269 <span class="post-meta-item"> 270 <span class="post-meta-item-icon"> 271 <i class="far fa-folder"></i> 272 </span> 273 <span class="post-meta-item-text">åç±»äº</span> 274 <span itemprop="about" itemscope itemtype="http://schema.org/Thing"> 275 <a href="/categories/%E3%80%90draft%E3%80%91%E5%BA%94%E7%94%A8/" itemprop="url" rel="index"><span itemprop="name">ãdraftãåºç¨</span></a> 276 </span> 277 ï¼ 278 <span itemprop="about" itemscope itemtype="http://schema.org/Thing"> 279 <a href="/categories/%E3%80%90draft%E3%80%91%E5%BA%94%E7%94%A8/%E5%B7%A5%E4%B8%9A%E8%90%BD%E5%9C%B0/" itemprop="url" rel="index"><span itemprop="name">å·¥ä¸è½å°</span></a> 280 </span> 281 ï¼
282 <span itemprop="about" itemscope itemtype="http://schema.org/Thing"> 283 <a href="/categories/%E3%80%90draft%E3%80%91%E5%BA%94%E7%94%A8/%E5%B7%A5%E4%B8%9A%E8%90%BD%E5%9C%B0/%E4%B8%9A%E5%8A%A1%E5%AE%89%E5%85%A8/" itemprop="url" rel="index"><span itemprop="name">ä¸å¡å®å ¨</span></a> 284 </span> 285 ï¼ 286 <span itemprop="about" itemscope itemtype="http://schema.org/Thing"> 287 <a href="/categories/%E3%80%90draft%E3%80%91%E5%BA%94%E7%94%A8/%E5%B7%A5%E4%B8%9A%E8%90%BD%E5%9C%B0/%E4%B8%9A%E5%8A%A1%E5%AE%89%E5%85%A8/API%E5%AE%89%E5%85%A8/" itemprop="url" rel="index"><span itemprop="name">APIå®å ¨</span></a> 288 </span> 289 </span> 290 291 292 <span class="post-meta-item" title="é 读次æ°" id="busuanzi_container_page_pv"> 293 <span class="post-meta-item-icon"> 294 <i class="far fa-eye"></i> 295 </span> 296 <span class="post-meta-item-text">é 读次æ°ï¼</span> 297 <span id="busuanzi_value_page_pv"></span> 298 </span> 299 <span class="post-meta-break"></span> 300 <span class="post-meta-item" title="æ¬æåæ°"> 301 <span class="post-meta-item-icon"> 302 <i class="far fa-file-word"></i> 303 </span> 304 <span class="post-meta-item-text">æ¬æåæ°ï¼</span> 305 <span>9.2k</span> 306 </span> 307 <span class="post-meta-item" title="é 读æ¶é¿"> 308 <span class="post-meta-item-icon"> 309 <i class="far fa-clock"></i> 310 </span> 311 <span class="post-meta-item-text">é 读æ¶é¿ ≈</span> 312 <span>17 åé</span> 313 </span> 314</div> 315 316 </div> 317 </header> 318 319 320 321 322 <div class="post-body" itemprop="articleBody"> 323 <p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615386.png" alt="image-20230514113324227" style="zoom: 25%;"></p> 324<p><strong>卿¬ç¯æç« 䏿们å°è®¨è®ºDataDomeå ¬å¸<sup>[1]</sup>æ¯å¦ä½å©ç¨<font color="red">åºäºæµçå¼å¸¸å¼æ£æµå 325SliceLine 326æ¥å¿«éå®å ¨å°çæå¤§éå¯ç¨äºé»æ¢æ¶ææµéçè§å/ç¾åã</font></strong>è½ç¶æºå¨å¦ä¹ (ML)ç使ç¨åå¾è¶æ¥è¶æ®éï¼ä½å¨å®å ¨ç¯å¢ä¸è§åä»ç¶å¾éè¦ãäºå®ä¸ï¼å ¬å¸å·²ç»æèµäºå¤§éææçè§å弿ï¼è½å¤å¿«éè¯ä¼°å¤§éè§åãæ¤å¤ï¼è§åéå¸¸æ´æ¹ä¾¿å建ãæä½åè§£éï¼å æ¤å¨MLæ¹æ³ä¹å¤ä»ç¶å¾æä»·å¼ã</p> 327<p>è½ç¶ SliceLine æå设计ç¨äºè¯å« ML 328模å表ç°ä¸ä½³çæ°æ®åéï¼ä½å®ç使ç¨å¯ä»¥<strong>éåºä»¥æ çç£æ¹å¼çæå¤§é䏿»å»ç¸å ³çè§åï¼å³ä¸ä½¿ç¨æ è®°æ°æ®</strong>ãæ¤å¤ï¼å©ç¨æºå¨äººæ£æµé®é¢æ¥è¯´æå¦ä½ä½¿ç¨ 329SliceLine 峿¶çæå¤§éæ¶æç¾åã</p> 330<p>该ç ç©¶è¿å°å±ç¤ºä¼åç SliceLine Python 331弿ºå®ç°ï¼å¹¶å±ç¤ºå¦ä½å°å ¶ç¨äºç¹å®ä½å°é¾çæºå¨äººæ£æµåéï¼<strong>åå¸å¼åè¯å¡«å æ»å»</strong>ï¼<strong>æ»å»è å©ç¨æ°åä¸ªåææç 332IP 333å°åè¿è¡æ»å»åç»è¿ä¼ ç»çå®å ¨æºå¶ï¼ä¾å¦éçéå¶çç¥</strong>ãéè¿ä¸ä¸ªçå®ä¸ççä¾åï¼è¯¥ç ç©¶å°é¦å è§£éå¦ä½ä½¿ç¨åºäºæµçæ£æµæ¥æ£æµæ¤ç±»æ»å»ï¼ä»¥å该ç ç©¶å¦ä½ä½¿ç¨æ°æ®å»ºæ¨¡å¨æå¡å¨ç«¯ä¿¡å·ï¼HTTP 334æ 头ãTLS æçº¹ãIP å°åçï¼ä¸åºç¨ <strong>SliceLine</strong> 335æ¥è¯å«å¹¶çæä¸åå¸å¼æ»å»ç¸å ³ç黿¢ç¾åã<font color="red">è¿ç§æ¹æ³ä½¿è¯¥ç ç©¶è½å¤å¨å»å¹´é»æ¢ 33659 ä½å®¢æ·è¶ è¿ 2.85 äº¿æ¬¡æ¶æç»å½å°è¯ã</font></p> 337<p>æåï¼è¯¥ç ç©¶å°è§£éè¿ç§æ¹æ³å¦ä½æ¨å¹¿å°é¤æºå¨äººæ£æµä¹å¤çå ¶ä»å®å ¨ç¨ä¾ï¼ä»¥åå¦ä½å¨ä¸åçè§å弿ä¸ä½¿ç¨å®ã</p> 338<span id="more"></span> 339<h3><span id="ä¸-说æ">ä¸ã说æ</span></h3> 340<p><strong>æºå¨äººæ£æµæ¯æè¯å«ååºåäººç±»ç¨æ·åèªå¨å软件ç¨åº(Botï¼Program 341to automate 342actions)çè¿ç¨</strong>ãæ¯è¯âbotâå¯ä»¥æåç§ç¨åºï¼å æ¬æç´¢å¼æç¬è«å设计ç¨äºè¿è¡æ¢è´ææç»æå¡æ»å»çæ¶æbotã</p> 343<p>æºå¨äººæ£æµå¾éè¦ï¼å 为æºå¨äººå¯ç¨äºåç§ç®çï¼å ¶ä¸ä¸äºå¯è½æ¯æå®³æä¸éå¾·çãä¾å¦ï¼<strong>æºå¨äººå¯ç¨äºè¿è¡æ¬ºè¯æ´»å¨ï¼å¦è´¦æ·æ¥ç®¡æåè¯å¡«å ï¼ä»ç½ç«ä¸è·åææä¿¡æ¯ï¼æå¨ç¤¾äº¤åªä½å¹³å°ä¸èªå¨åå¸åå¾é®ä»¶</strong>ã</p> 344<ul> 345<li>åè¯å¡«å /è´¦æ·æ¥ç®¡â çªåç¨æ·å¸æ·;</li> 346<li>DDoSæ»å»â 使ç½ç«/ç§»å¨åºç¨ç¨åºä¸å¯ç¨;</li> 347<li>Cardingâ æµè¯è¢«ççä¿¡ç¨å¡;</li> 348<li>æçºµæç¥¨â çæèåçæµè§éï¼å¢å ç¹èµã转åçæ°éã</li> 349</ul> 350<p>å¯ä»¥ä½¿ç¨å¤ç§ææ¯åä¿¡å·è¿è¡æºå¨äººæ£æµï¼å æ¬ä½¿ç¨MLåæ<strong>ç¨æ·è¡ä¸ºæ¨¡å¼</strong><sup>[2]</sup>ã<strong>æµè§å¨æçº¹è¯å«</strong><sup>[3][4]</sup>åå ¶ä»å½¢å¼çæçº¹è¯å«ï¼å¦<strong>TLSæçº¹è¯å«</strong><sup>[5]</sup>ãä¸äºå¸¸è§çæºå¨äººæ´»å¨ææ å æ¬<strong>é«é¢è¯·æ±ãç¨æ·è¡ä¸ºä¸ä¸è´ç模å¼å使ç¨éæ åç¨æ·ä»£çæå ¶ä»è¯å«ä¿¡æ¯ã</strong></p> 351<p>ææçæºå¨äººæ£æµæ¯ç»´æ¤å¨çº¿ç³»ç»åå¹³å°å®å ¨å宿´æ§çéè¦ç»æé¨åï¼å¹¶è¢«å¹¿æ³åºç¨äºåç§ç»ç»ï¼å æ¬çµååå¡ç½ç«ã社交åªä½å¹³å°åéèæºæã尽管MLææ¯è¶æ¥è¶å¤å°ç¨äºæºå¨äººæ£æµï¼ä½å¤§å¤æ°å ¬å¸ä»æé«æçè§å弿å¯ä¸MLç®æ³é å使ç¨ã<font color="red">è§åçä¼ç¹æ¯å¯ä»¥ç«å³é¨ç½²ä»¥åè½»æ»å»ï¼å¹¶ä¸é«åº¦å¯è§£éï¼ä½¿å®ä»¬æä¸ºMLæºå¨äººæ£æµçè¯å¥½è¡¥å ã</font></p> 352<p>卿¬æä¸ï¼éç¹å ³æ³¨ä½¿ç¨å¯ä»¥å¨<strong>åºç¨å±æ¶éçä¿¡æ¯è¿è¡æºå¨äººæ£æµ</strong>ï¼æ´å ·ä½å°è¯´æ¯<strong>HTTP头</strong>å<strong>客æ·ç«¯ä¿¡æ¯</strong>ãç¹å«æ¯ï¼è¯¥ç ç©¶å°è§£éå¦ä½<strong>ä½¿ç¨æµç®æ³åæå¤§éæµéæ°æ®ï¼è¯å«å¼å¸¸äºä»¶æå¼å¸¸å¼</strong>ï¼å¹¶<strong>åæåºå±æµéç¾åä»¥æ¨æè§å</strong>ãè¿äºææ¯å¯ä»¥è½¬ç§»å°å ¶ä»æºå¨äººæ£æµä¿¡å·åå ¶ä»ç½ç»å®å ¨é¢åä¸ï¼å ¶ä¸å¯ä»¥æ§è¡è¡ä¸ºåæï¼ä»¥è¯å«å¯çæ°æ®é¨åï¼ç¶å使ç¨è¿äºä¿¡æ¯æåè§åã</p> 353<p>è¶æ¥è¶å¤æºå¨äººä½¿ç¨ç<strong>IP代ç+社åºé©±å¨çåæ£æµæ¡æ¶</strong>çç»è¿ææ¯ãå©ç¨æ°å个ä½å® 代ç忣ä»ä»¬çæ»å»ï¼ä¸ææ´æ¹å伪é ä»ä»¬çç¾å/æçº¹ã</p> 354<ul> 355<li><strong>使ç¨ä»£çååæ»å»</strong>ï¼é¿å åºäºIPçéçéå¶ã</li> 356<li><strong>使ç¨ä½å® 代çååæ»å»</strong>ï¼é¿å åºäºä¿¡èªç黿¢ã</li> 357<li><strong>使ç¨ä¸ç®æ ç½ç«ä½äºåä¸å½å®¶/å°åºçä½å® 代çè¿è¡åå¸å¼æ»å»</strong>ï¼é¿å å°çé»å¡ã</li> 358</ul> 359<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615490.png" alt="image-20230514153539082" style="zoom:50%;"></p> 360<h3><span id="äº-æå¨æ£æµå黿¢åå¸å¼æ»å»">äºãæå¨æ£æµå黿¢åå¸å¼æ»å»</span></h3> 361<h4><span id="21-æ£æµæµéå³°å¼">2.1 æ£æµæµéå³°å¼</span></h4> 362<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615644.png" alt="image-20230514155453228" style="zoom: 33%;"></p> 363<h4><span id="22-æ·±å ¥äºè§£ä¸ååæ®µ">2.2 æ·±å ¥äºè§£ä¸ååæ®µ</span></h4> 364<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615865.png"></p> 365<h4><span id="23-è§å¯ä¸ä¸ªè§å">2.3 è§å¯ä¸ä¸ªè§å</span></h4> 366<figure class="highlight shell"><table><tr><td class="gutter"><pre><span class="line">1</span><br></pre></td><td class="code"><pre><span class="line">Country=Russia && User Agent=Mozilla/5.0 (Macintosh;Intel Mac OS X 10_15_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.84 Safari/537.36</span><br></pre></td></tr></table></figure> 367<blockquote> 368<p>æçº¹è§£æç½ç«ï¼https://www.useragentstring.com/Chrome99.0.4844.84_id_19983.php</p> 369</blockquote> 370<p><strong><font color="red">How to automate the 371analysis?</font></strong></p> 372<h3><span id="ä¸-使ç¨slicelineæ£æµå黿¢åå¸å¼æ»å»">ä¸ãä½¿ç¨ 373Slicelineæ£æµå黿¢åå¸å¼æ»å»</span></h3> 374<p><strong><font color="red">æ´ä½æµç¨æ¦è¿°ï¼</font></strong></p> 375<ul> 376<li><p><strong>å¯¹ç¨æ·è¿è¡èåç»è®¡</strong>ãætokenå®ä½çå 容ï¼ãï¼</p> 377<ul> 378<li><p>å¯ä¸User Agentçæ°éï¼</p></li> 379<li><p>å¯ä¸IPçæ°éï¼</p></li> 380<li><p>ä¼è¯æ°éï¼</p></li> 381</ul></li> 382<li><p>使ç¨<strong>åºäºz-scoreçå¼å¸¸æ£æµç®æ³</strong>æ£æµç»ææ¶é´åºåä¸çå¼å¸¸å¼ãåç°å¼å¸¸å¼å§æ¶é´ãï¼</p></li> 383<li><p>æ¨éæè¿°æ»å»çäºä»¶ï¼å®¢æ·ãå¼å§æ¶é´ï¼ï¼</p></li> 384<li><p><strong>卿µå¼å¤çä¸å®æ½ï¼ä½¿ç¨Apache 385Flinkï¼ï¼ä½¿ç¨Slicelineèªå¨åçæè§å</strong>ï¼</p></li> 386</ul> 387<h4><span id="31-sliceline-说æ">3.1 Sliceline 说æ</span></h4> 388<h5><span id="1åçè§£æ">ï¼1ï¼åçè§£æ</span></h5> 389<p><strong>Slicelineæ¯ç±Sagadeevaç人æåºçç®æ³<sup>[1]</sup>ï¼å¯ç¨äºML模åè°è¯</strong>
389ãå¨è®ç»MLæ¨¡åæ¶ï¼é常ä¼è®¡ç®æ¨¡åå¨ä¸äºä¿çæ°æ®éä¸ç平忧è½ï¼æ¨¡åè¯ä¼°ï¼ãSlicelineå 许æ¾å°ç¹å¾ç©ºé´ä¸åªäºåºåè´è´£é常é«ç==é误ç==ãæ¢å¥è¯è¯´ï¼å®æ¾å°<strong>ç¹å¾åç</strong>ï¼å³æ¨¡å表ç°ä½äºå¹³åæ°´å¹³çç¹å¾ç©ºé´çå空é´ãè¿äºåçå®é ä¸è¡¨ç¤ºä¸ºç¹å¾æ¡ä»¶çååå¼ï¼å¯ä»¥è½»æ¾è½¬æ¢ä¸ºè§åã</p> 390<p>è¯¥ç®æ³ä»¥æ°æ®éåæ°æ®é䏿¯ä¸ªæ ·æ¬çé误ä½ä¸ºè¾å ¥ãå®è¦æ±æ°æ®éä¸çç¹å¾æ¯åç±»çãè¿éç¨äºæºå¨äººæ£æµé®é¢ï¼å 为æ¶éçæ°æ®å¤§å¤æ¯åç±»æ°æ®ï¼ä¾å¦ç¨æ·ä»£çãå½å®¶ææå ³è®¾å¤ç±»åçä¿¡æ¯(GPUåå·ç)ã请注æï¼è¿å¹¶ä¸æå³çå®ä¸è½ä¸è¿ç»ç¹å¾ä¸èµ·ä½¿ç¨ãå¨è¿ç»ç¹å¾çæ åµä¸ï¼æä»¬éè¦åºç¨é¢å¤çæ¥å®ä¹ä¸åçé´éå¹¶å°æ¯ä¸ªå¼åé å°ä¸ä¸ªé´éä¸ãè¿ä¸ªè¿ç¨ç§°ä¸ºäºå¼åï¼å°è¿ç»ç¹å¾è½¬æ¢ä¸ºåç±»ç¹å¾ãã<strong>è¿éåºè¯¥æ¯æç¦»æ£åå¤ç</strong>ã</p> 391<p>æä»¬ä½¿ç¨ä¸ä¸ªç®åçä¾åæ¥è¯´æSlicelineç颿ç¨ä¾ï¼è°è¯ML模åãå¨ä¸é¢ä¾åä¸ï¼èèä¸ä¸ªåªæ3个ç¹å¾f1ãf2åf3çæ°æ®éãæ¤å¤ï¼å设è®ç»äºä¸ä¸ªå类模åï¼å¹¶è®¡ç®äºä¿çæ°æ®é䏿¯ä¸ªæ ·æ¬ç¸å ³çå¯¹æ°æå¤±ï¼äº¤åçµæå¤±å½æ°ï¼ã</p> 392<blockquote> 393<p><strong>äºå类交åçµæå¤±å½æ°ï¼</strong>å¯¹æ°æå¤±ï¼log 394lossï¼æ¯ä¸ç§ç¨äºè¯ä¼°å类模å颿µç»æçæå¤±å½æ°ãå¯¹æ°æå¤±é常ç¨äºäºå åç±»é®é¢ï¼å®æµéäºæ¨¡å颿µçæ¦çåå¸ä¸å®é æ ç¾çå·®å¼ãå¯¹æ°æå¤±è¶å°ï¼è¡¨ç¤ºæ¨¡åç颿µç»æè¶æ¥è¿äºç宿 ç¾ï¼å æ¤æ¨¡åçæ§è½è¶å¥½ãå¯¹æ°æå¤±çåå¼èå´æ¯0å°æ£æ ç©·ï¼å½æ¨¡åç颿µå®å ¨åç¡®æ¶ï¼å¯¹æ°æå¤±ä¸º0ï¼è彿¨¡åç颿µå®å ¨é误æ¶ï¼å¯¹æ°æå¤±è¶è¿äºæ£æ ç©·ãå¯¹æ°æå¤±è¶å¤§ï¼è¡¨ç¤ºæ¨¡åç颿µä¸ç宿 ç¾ä¹é´çå·®å¼è¶å¤§ï¼å æ¤æ¨¡åçæ§è½è¶å·®ã</p> 395</blockquote> 396<p><span class="math display">\[ 397J(\theta)=-\frac{1}{N} \sum_{i=1}^N y^{(i)} \log 398\left(h_\theta\left(x^{(i)}\right)\right)+\left(1-y^{(i)}\right) \log 399\left(1-h_\theta\left(x^{(i)}\right)\right) 400\]</span></p> 401<blockquote> 402<p>å¾1ï¼å ·æ3个åç±»ç¹å¾åç¸å ³çæ¯ä¸ªæ ·æ¬é误çç¤ºä¾æ°æ®é</p> 403</blockquote> 404<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615937.png" alt="image-20230514134017574" style="zoom:50%;"></p> 405<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141840304.png" alt="image-20230514184054123" style="zoom:50%;"></p> 406<p><strong>Slicelineå¯ä»¥éè¿æ¤è¾å ¥æ¾å°çåçç¤ºä¾æï¼</strong></p> 407<ul> 408<li>f1 = bçå¹³å误差为0.9ï¼</li> 409<li>f2 = d â§ f3 = fçå¹³å误差为0.85ï¼</li> 410</ul> 411<p>è¿ä¸¤ä¸ªåçç误差é½é«äºæ°æ®éçå¹³å误差0.38ã</p> 412<p>ååä¸ï¼æä»¬å¯»æ¾çåçå¯ä»¥æ¯è®¸å¤ç¹å¾çç»åï¼<strong>å¯è½çåç空é´éçç¹å¾çæ°éååºæ°çå¢å åææ°çº§å¢é¿</strong>ãSlicelineéè¿ä½¿ç¨ä¸¤ç§ææ¯æ¥æ¢ç´¢è¿ä¸ªç©ºé´ï¼ã<font color="red">æ¬è´¨ä¸æ¯æåå§æ°æ®è½¬æ¢ä¸ºäºè¿å¶åéï¼ç¨é»è¾è¿ç®ä¸ç©éµè¿ç®æ¥ä»£æ¿æ°æ®æ«æï¼å å¿«é度</font>ã</p> 413<ul> 414<li>æä¸¾åè¯ä¼°ä½¿ç¨<strong>ç¨ç线æ§ä»£æ°</strong>çåçï¼è¿å¯ä»¥ä»ç°æç髿å®ç°ä¸è·çï¼ï¼Enumerating 415and evaluating slices using <strong>sparse linear algebra</strong> that 416can profit from existing efficient implementations.ï¼</li> 417<li>åºäºå¹³è¡¡<strong>åç大å°</strong>å<strong>å¹³ååç误差</strong>çåæ°ï¼æ éè®¿é®æ°æ®å³å¯ä¿®åªåçåé项ãï¼Pruning 418of slice candidates without accessing the data based on a score that 419balances between the slice size and the average slice error.ï¼</li> 420</ul> 421<p>è¿äºææ¯ä½¿ç®æ³é«æä¸å¯æ©å±ï¼å ¶ç¡®åå¤æåº¦é«åº¦ä¾èµäºæ°æ®éçç»èã</p> 422<p>è½ç¶å¨æ¬æä¸æä»¬ä¸ä¼è¯¦ç»ä»ç»Slicelineç®æ³çå®ç°ç»èï¼ä½æä»¬å¸æä¸ºè¯»è æä¾ä¸äºæå ³ä½¿ç¨çº¿æ§ä»£æ°è¯ä¼°åçæè§åçç´è§ãé¦å ï¼æä»¬ä»ç©å ·æ°æ®éå¼å§ï¼å¹¶è¿è¡ç¬¬ä¸æ¬¡è½¬æ¢ï¼<strong>ç¬çç¼ç </strong>ãç¬çç¼ç æ¯ä¸ç§æ¹æ³ï¼å¯ä»¥éè¿å建æ¯ä¸ªç¹å¾å¼çä¸åæ¥å°åç±»æ°æ®ç¼ç 为æ°åãå¨ä¸é¢ç示ä¾ä¸
422ï¼ç¹å¾f1æ3个å¼aãbåcï¼å æ¤ä¸ºäºå¯¹å ¶è¿è¡ç¼ç ï¼æä»¬å建äº3个äºè¿å¶åï¼å¦ä¸æç¤ºã</p> 423<blockquote> 424<p>å¾2ï¼å±ç¤ºå¦ä½ä½¿ç¨ç©éµä¹æ³æ¥æ¥æ¾å¹é æ ·æ¬ç示ä¾</p> 425</blockquote> 426<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615091.png" alt="image-20230514135737715" style="zoom: 50%;"></p> 427<p><strong>åæ ·ç转æ¢ä¹å 许æä»¬å°è§å表示为äºè¿å¶åéï¼åéå°å¨å®æ½æ¡ä»¶çä½ç½®å å«å¼1ã</strong>ä¾å¦ï¼å¯¹äºè§åf1 428= 429bï¼äºè¿å¶åéç第äºä¸ªå ç´ å°æ¯1ï¼å ä¸ºæ¤æ¡ä»¶å¨ç¬çç¼ç 空é´ç第äºåä¸è¡¨ç¤ºãæä»¬å¯ä»¥ç¨è¿ç§æ¹å¼è¡¨ç¤ºææåéè§åï¼å¹¶è½»æ¾è®¡ç®æç¤ºåªä¸ªæ ·æ¬ç¬¦åæ¯ä¸ªè§åçæ©ç ã<strong>妿æä»¬å°ç¬çç¼ç çç¹å¾ç©éµFåè§åç©éµR表示为FåRï¼åç©éµä¹ç§¯FxRçç»ææ£å¥½ç»åºäºè¿ä¸ç¹ï¼ä¸ä¸ªæ©ç ï¼å ¶ä¸è¡å¯¹åºäºæ ·æ¬ï¼å对åºäºè§åã</strong>该ç©éµç第iè¡ç¬¬jåå ç´ çäº1ï¼è¿æå³çæ ·æ¬iä¸è§åjå¹é ã</p> 430<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141842771.png"></p> 431<figure> 432<img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141843904.png" alt="image-20230514184304768"> 433<figcaption aria-hidden="true">image-20230514184304768</figcaption> 434</figure> 435<p><strong>æäºè¿ä¸ªæ©ç Lï¼æä»¬å¯ä»¥è½»æ¾è®¡ç®æ¯ä¸ªåççå¹³å误差ï¼å³ä¸æä¸ªè§åå¹é çæ ·æ¬éçå¹³å误差ã</strong>è¿ä¸ªè®¡ç®å¨Slicelineç®æ³ä¸é常éè¦ï¼å 为å®å 许计ç®å¾åï¼æ ¹æ®è¿ä¸ªå¾åï¼å¯ä»¥æ¢ç´¢å¯è½çåç空é´ãå æ¤ï¼ä¸ºäºè®¡ç®å¹³ååçè¯¯å·®ï¼æä»¬é¦å 计ç®è¯¯å·®åé䏿©ç Lçç©éµä¹ç§¯ï¼è¿ç»åºäº<strong>åçä¸çæ»è¯¯å·®</strong>ï¼E<sup>T</sup> 436* 437Lï¼ãæä»¬ä¹å¯ä»¥è®¡ç®Lä¸<strong>åä½åé</strong>çä¹ç§¯ï¼ææå°è®¡ç®<strong>å¹é æ¯ä¸ªè§åçæ ·æ¬æ°</strong>ã<strong>æåï¼æä»¬å¯ä»¥éå ç´ å°å°æ»è¯¯å·®ååç大å°ç¸é¤ï¼ä»¥è·å¾å¹³å误差ãè¿å°±æ¯ä½¿ç¨çº¿æ§ä»£æ°æä½è¯ä¼°è§åçä¸»è¦ææ³ã</strong></p> 438<blockquote> 439<p>å¾3ï¼æ¾ç¤ºå¦ä½ä½¿ç¨ç¹ç§¯è®¡ç®å¹³ååç误差ç示ä¾</p> 440</blockquote> 441<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141843063.png" alt="image-20230514184341917" style="zoom:50%;"></p> 442<p>è½ç¶Slicelineæåæ¯ä½ä¸ºä¸ç§æ¨¡åè°è¯ææ¯æåºçï¼ä½æä»¬å¯ä»¥éæ°å©ç¨å®ï¼å¹¶å°å ¶ç¨äºçæé对ç¹å®æ°æ®ç»çè§åãå¨ç½ç»å®å ¨çèæ¯ä¸ï¼æä»¬å¤äºè¿æ ·ä¸ç§æ åµï¼é²å¾¡è æ¶éäºæ¥èªä¸¤ä¸ªæ°æ®ç»çæ°æ®ï¼</p> 443<ul> 444<li>Group 0ï¼ä¸ä¸ªè¢«è®¤ä¸ºæ¯æ£å¸¸ç群ä½ï¼ä¸»è¦ç±éæ¶ææ ·æ¬ç»æã</li> 445<li>Group 1ï¼å¦ä¸ä¸ªæ°æ®ç»ï¼å 嫿¶æåæ£å¸¸æµéæ ·æ¬ã</li> 446</ul> 447<p>å¯ä»¥å°Group 0åé ç»æ£å¸¸æ°æ®ï¼å°Group 4481åé ç»å¯çæ°æ®ã<font color="red">妿æä»¬å°è¯¥ç»è§ä¸ºæä»¬æä¾ç»Slicelineç®æ³çé误ï¼å®å°æ¾å°é对å¯çç»çåçï¼å ä¸ºå®æ¯å ·ææ´é«è¯¯å·®çä¸ç»ã</font>æä»¬å¨ä¸é¢å±ç¤ºäºç¸åçæ ·ä¾æ°æ®éï¼å ¶ä¸éè¯¯è¢«ç»æ¿æ¢ã</p> 449<blockquote> 450<p>å¾4ï¼å ·æ3个åç±»ç¹å¾åç¸å ³ç»çç¤ºä¾æ°æ®é</p> 451</blockquote> 452<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615405.png" alt="image-20230514143215654" style="zoom:50%;"></p> 453<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141841348.png" alt="image-20230514184122206" style="zoom:50%;"></p> 454<p>è¿ç§ç®åçææ¯å 许æä»¬çæé对æºå¨äººæµéçè§åï¼<strong><font color="red">åææ¯æä»¬å¯ä»¥å®ä¹ä¸¤ç»ä¸åçæ°æ®ã</font></strong></p> 455<h5><span id="1slicelineçpython弿ºä¼åå®ç°">ï¼1ï¼SlicelineçPython弿ºä¼åå®ç°</span></h5> 456<p>å论æä½è <sup>[6]</sup>æä¾äºRåApache 457SystemDSçç®æ³å®ç°ãæä»¬å³å®ä½¿ç¨Pythonå®ç°å®ï¼å¹¶å°å ¶ä½ä¸ºä¸ä¸ªå 弿ºç»ç¤¾åºã<strong>æä»¬é¦å éæ°ä½¿ç¨Pythonå®ç°äºé»è¾ï¼ç¶åå®ç°äºä¸äºæ§è½æ¹è¿ï¼è¿ä½¿å¾ä¸Rå®ç°ç¸æ¯é度æé«äº1000å</strong>ãè¿æ¯å¯è½çï¼<strong>å 为æä»¬ä½¿ç¨äºå¯ç¨çPythonåºï¼å¦Numpyï¼è¿äºåºå©ç¨åºå±çC++代ç åç¨çç©éµ</strong>ãæ¤å¤ï¼æä»¬è¿ç¨ç©éµä¹æ³æ¿æ¢äºä¸äºfor循ç¯ç»æï¼è¿ä¸æ¥æé«äºé度ã<font color="red">该å çæºä»£ç å¯å¨GitHubä¸è·å<sup>[7]</sup>ï¼ä¸pandas 458pythonåºå ¼å®¹ï¼å¹¶éµå¾ªscikit-learn APIè§èã</font></p> 459<h5><span id="2åºç¨slicelineå°ä¸ä¸ªdemo-botæ£æµæ°æ®é">ï¼2ï¼åºç¨Slicelineå°ä¸ä¸ªDemo-Botæ£æµæ°æ®é</span></h5> 460<p>
460卿¬èä¸ï¼æä»¬å°Slicelineåºç¨äºä¸ä¸ªç®åçç©å ·æ°æ®éï¼è¯¥æ°æ®éç±<strong>HTTP头</strong>å<strong>ä¸ä¸æä¿¡æ¯</strong>ç»æï¼ç¨äºBotæ£æµé®é¢ã为ç®åèµ·è§ï¼æä»¬å建äºä¸ä¸ªæµéæ°æ®éï¼å ·æäººç±»åBotçç¹å¾ãæä»¬ä½¿ç¨äºæ¥èªä¸ä¸ªæ³å½çµååå¡ç½ç«çæ°æ®ãæä»¬æ¶éäºæ¥èªæ³è¯å½å®¶çæ§ä¼è¯æ°æ®ï¼å¹¶å°å®ä»¬åé ç»Group 4610ãæä»¬è¿æ¶éäºæ¥èªåä¸ç½ç«çæ¥èªéæ³è¯å½å®¶çæ°æ®ï¼è¿äºæ°æ®ä½¿ç¨æ°æ®ä¸å¿IPå°åææè¿è¢«æ 记为<strong>代ççIP</strong>ï¼å°Group 4621åé ç»å¯çæµéã</p> 463<blockquote> 464<p>å¾5ï¼ç±äººç±»ï¼ç¬¬0ç»ï¼åæ½å¨æºå¨äººï¼ç¬¬1ç»ï¼æµéç»æççå®ä¸ççµåå塿µéæ°æ®é示ä¾</p> 465</blockquote> 466<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615688.png"></p> 467<p>以ä¸Python代ç 示ä¾å±ç¤ºäºæä»¬å¦ä½å°Slicelineåºç¨äºæ°æ®éãæä»¬ä½¿ç¨pandasæ°æ®å¸§dfå卿°æ®éï¼</p> 468<figure class="highlight python"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br></pre></td><td class="code"><pre><span class="line"><span class="keyword">from</span> sliceline.slicefinder <span class="keyword">import</span> Slicefinder</span><br><span class="line"></span><br><span class="line">sf = Slicefinder(</span><br><span class="line"> alpha = <span class="number">0.80</span>,</span><br><span class="line"> k = <span class="number">4</span>,</span><br><span class="line"> max_l = df.shape[<span class="number">1</span>],</span><br><span class="line"> min_sup = <span class="number">1</span>,</span><br><span class="line"> verbose = <span class="literal">True</span></span><br><span class="line">)</span><br><span class="line">sf.fit(df.drop(<span class="string">"group"</span>, axis=<span class="number">1</span>), df[<span class="string">"group"</span>])</span><br></pre></td></tr></table></figure> 469<p><strong>䏿¦å°ç®æ³æåå°æ°æ®ä¸ï¼æä»¬å°±å¯ä»¥ä½¿ç¨æ¾å°çåçæ¥çææéåæä»¬éæ±çè¯æ³è§åã</strong>ä¾å¦ï¼æä»¬å¯ä»¥è¿æ ·åï¼</p> 470<figure class="highlight python"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br></pre></td><td class="code"><pre><span class="line"><span class="keyword">for</span> <span class="built_in">slice</span>, stats <span class="keyword">in</span> <span class="built_in">zip</span>(sf.top_slices_, sf.top_slices_statistics_):</span><br><span class="line"> rule = <span class="literal">None</span></span><br><span class="line"> <span class="keyword">for</span> feat, value <span class="keyword">in</span> <span class="built_in">zip</span>(df.columns, <span class="built_in">slice</span>):</span><br><span class="line"> <span class="keyword">if</span> value <span class="keyword">is</span> <span class="keyword">not</span> <span class="literal">None</span>:</span><br><span class="line"> <span class="keyword">if</span> rule <span class="keyword">is</span> <span class="literal">None</span>:</span><br><span class="line"> rule = <span class="string">f"`<span class="subst">{feat}</span>`=`<span class="subst">{value}</span>`"</span></span><br><span class="line"> <span class="keyword">else</span>:</span><br><span class="line"> rule += <span class="string">f" && `<span class="subst">{feat}</span>`=`<span class="subst">{value}</span>`"</span></span><br><span class="line"> <span class="built_in">print</span>(<span class="string">f"
470<span class="subst">{rule}</span> | slice size: <span class="subst">{stats[<span class="string">'slice_size'</span>]}</span>"</span>)</span><br></pre></td></tr></table></figure> 471<p>å¨æä»¬çæ¡ä¾ä¸ï¼è¿æ®µç®åç代ç ç»åºäºä»¥ä¸è§åï¼</p> 472<figure class="highlight shell"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br></pre></td><td class="code"><pre><span class="line">`Country`=`Germany` | slice size: 4149.0</span><br><span class="line">`User Agent`=`Chrome` && `Country`=`Germany` | slice size: 4133.0</span><br><span class="line">`Country`=`Germany` && `Accept Language`=`en-US,en;q=0.9` | slice size:</span><br><span class="line">4097.0</span><br><span class="line">`User Agent`=`Chrome` && `Country`=`Germany` && `Accept</span><br><span class="line">Language`=`en-US,en;q=0.9` | slice size: 4097.0</span><br></pre></td></tr></table></figure> 473<p>è¿æå³çï¼å¯¹äºè¿ä¸ªç¹å®çç½ç«ï¼<strong>æ»å»æ¥èªå¾·å½ï¼ä½¿ç¨Chromeåç¹å®çæ¥åè¯è¨æ 头</strong>ã</p> 474<h4><span id="32-åå¸å¼æ»å»çåºç¨">3.2 åå¸å¼æ»å»çåºç¨</span></h4> 475<p><strong>Slicelineå¯ä»¥åºç¨äºåå¸å¼Botæ»å»æ£æµé®é¢ï¼éè¿å®ä¹ä¸¤ä¸ªä¸åçæµéç»</strong>ã<font color="red">ç¨æ»å»å忻廿é´çæ¥æ ç¾ï¼ä½¿ä»»å¡åå°æ çç£</font>ãï¼</p> 476<ul> 477<li><strong>æ»å»åçæµé</strong>ï¼è¿é¨åæµéä» å å«äººç±»æ°æ®ï¼Group 4780ï¼ï¼</li> 479<li><strong>æ»å»æé´çæµé</strong>ï¼è¿é¨åæµéå å«äººç±»åBotæµéï¼Group 4801ï¼ï¼</li> 481</ul> 482<p><font color="red">请注æï¼å¨å®é æ åµä¸ï¼Group
4830å¯è½å å«ä¸äºæ®ççBotæµéãå®å¦ä½å½±åSlicelineçæçè§åçè´¨éåå³äºGroup 4840ä¸Botæµéçæ¯ä¾ä»¥åå®ä¸Group 1ä¸ä¹åå¨çBotæµéçç¸ä¼¼ç¨åº¦ã</font></p> 485<blockquote> 486<p>å¾6ï¼æ¶é´åºåå¾ï¼è¯´æSliceline使ç¨ç2个ç»ï¼æ»å»åç人类æµéï¼ç»¿è²ï¼Group 4870ï¼åæ··åçBotå人类æµéï¼çº¢è²ï¼Group 1ï¼</p> 488</blockquote> 489<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615700.png"></p> 490<p>ä¸å¾ä¸å±ç¤ºäºè¿ä¸ªæ³æ³ï¼å设å¼å¸¸æ£æµç®æ³æä¾äºæ»å»å¼å§æ¶é´ï¼ç¶åç¨åè§¦åæµéåæã妿æä»¬å°æ»å»åçæµéæ è¯ä¸ºGroup 4910ï¼å°æ»å»æé´çæµéæ è¯ä¸ºGroup 4921ï¼é£ä¹éè¿åºç¨Slicelineï¼æä»¬å°æ¾å°é对Botæµéçè§åã</p> 493<p>æä»¬æåºçæ£æµåå¸å¼æ»å»çæ¹æ³ä¸ä¾èµäºIPæä¼è¯çæµéåæã<strong>ç¸åï¼æä»¬åææ¯ä¸ªã客æ·ãçå ¨å±æµéã为æ¤ï¼æä»¬è®¡ç®å 个èåå¹¶åæå®ä»¬éæ¶é´çæ¼åã</strong>æä»¬è®¡ç®çèåç示ä¾å æ¬ï¼</p> 494<ul> 495<li><strong>请æ±çæ°é</strong>ï¼</li> 496<li><strong>å¯ä¸User Agentçæ°é</strong>ï¼</li> 497<li><strong>å¯ä¸å½å®¶çæ°é</strong>ï¼</li> 498<li><strong>å¯ä¸IPå°åçæ°é</strong>ï¼</li> 499</ul> 500<p><strong>ææèåé½ä½¿ç¨Apache 501Flink<sup>[8]</sup>å¨10åéççªå£ä¸ä»¥æµå¼å¤çæ¹å¼è®¡ç®ã</strong>请注æï¼æ¶é´çªå£ç大å°å¯ä»¥æ ¹æ®ç¨ä¾è¿è¡åæ°åï¼</p> 502<ul> 503<li><strong>è¾å°çæ¶é´çªå£å¯ä»¥æ´å¿«å°è¿è¡æ£æµï¼ä½å¯è½ä¼å¢å 误æ¥çï¼</strong></li> 504<li><strong>è¾å¤§çæ¶é´çªå£å¯è½ä¼å¨å¼å¸¸æ£æµä¸å¼å ¥æ»åï¼ä½å¯ä»¥éä½è¯¯æ¥ççé£é©ï¼</strong></li> 505</ul> 506<blockquote> 507<p>å¾7ï¼å个ä¸åèåæ¶é´åºåç示ä¾ï¼è¯·æ±è®¡æ°ãIPæ°éãç¨æ·ä»£çæ°éãå½å®¶æ°éï¼</p> 508</blockquote> 509<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615368.png"></p> 510<p>æä»¬ç¬ç«åææ¯ä¸ªæ¶é´åºåï¼å¹¶ä½¿ç¨<strong><font color="red">åºäºz-scoreçç®æ³æ£æµæé«å¼</font></strong>ãæ»å¨çªå£å 许æä»¬ä¼°è®¡æ£å¸¸æ°æ®çåå¸ï¼å¹¶åºäºè¯¥åå¸è®¡ç®æ°å¼çz-scoreã妿z-scoreè¶ è¿ä¸å®éå¼ï¼å宣叿»å»å¼å§ï¼å¹¶è§¦åæµéåæã</p> 511<p><strong>è¯¥ç®æ³è½»é级ä¸å¯ä»¥è½»æ¾å°ä»¥æµå¼å¤çæ¹å¼å®ç°ãè¯¥ç®æ³å¯è½ä¼éå°ä¸¤ä¸ªä¸åçé®é¢ï¼</strong></p> 512<ul> 513<li><strong>误æ¥ï¼</strong>æ£æµå°æ»å»ä¸æ¯ç±Botå¼èµ·çï¼å¯è½æ¯å 为z-scoreéå¼è¿äºææï¼æè å 为ç±äºæäºç¹æ®äºä»¶ï¼çªåæ°é»ãéééå®çï¼å¯¼è´æµéå¢å ã</li> 514<li><strong>æ¼æ¥ï¼</strong>éè¿æ¬åºè¯¥æ£æµå°çæ»å»ã</li> 515</ul> 516<p><strong><font color="red">å ³äºæ¼æ¥é®é¢ï¼å¯ä»¥æ¶éç¤ºä¾æ¶é´åºåå¹¶æ è®°éè¦æ£æµçæ»å»ãè¿ä¸ªå¸¦æ ç¾çæ°æ®éå¯ä»¥è¿ä¸æ¥ç¨äºæ´å¥½å°è°æ´éå¼ã</font></strong></p> 517<p>å ³äºè¯¯æ¥é®é¢ï¼éåçè§åçææ¥éª¤å¯ä»¥é²æ¢æä»¬çæé对æ£å¸¸ä¸å¡çè§åã<strong>妿æµéæ¿å¢æ¯ç±æ£å¸¸ä¸å¡æµéå¼èµ·çï¼åSlicelineå°ä¸ä¼åç°æ»å»ååæµéç¹å¾çä»»ä½å·®å¼ï¼å æ¤å°ä¸ä¼çæä»»ä½è§å</strong>ããæç¹ææï¼è§åææç±»ä¼¼åè¦èç±»ï¼æé误æ¥çè½åã</p> 518<h5><span id="ä¼å¿">ä¼å¿</span></h5> 519<ul> 520<li>ä½¿ç¨æµéèååå¼å¸¸æ£æµæ¥<strong>æ£æµåå¸å¼æ»å»</strong>çæ¹æ³ï¼</li> 521<li>æä»¬<strong>å©ç¨åççº¿æ¥æ¨ææ¶æç¾åå¹¶çæè§å</strong>ï¼</li> 522<li>ææ<font color="red">对æé¢ç¹è°æ´åä¿®æ¹/ä¼ªé æçº¹çæºå¨äºº</font>ï¼</li> 523<li>åç线<strong>å¯ä»¥åºç¨äºä¾èµè§å弿çå ¶ä»å®å ¨ç¨ä¾</strong>ï¼</li> 524</ul> 525<h4><span id="33æ¡ä¾åæåæ®å¡«å æ»å»è¢«sliceline黿¢">3.3 526æ¡ä¾åæï¼åæ®å¡«å æ»å»è¢«Sliceline黿¢</span></h4> 527<p>为äºè¯´ææä»¬çæ¹æ³ï¼æä»¬å±ç¤ºäºä¸ä¸ªä½¿ç¨æä»¬çæµå¼å¼å¸¸æ£æµåSlicelineç¸ç»åçæ¸¸æå¹³å°æ»å»çå ·ä½ä¾åãå¾8å±ç¤ºäº4个ä¸åçæ¶é´åºåï¼</p> 528<ul> 529<li><strong>èè²ï¼</strong>è¢«æ£æµå¼æå类为人类çHTTPç»å½æµéï¼å¯è½å å«å°æªæ£æµå°çBotæµéï¼ã</li> 530<li><strong>æ©è²ï¼</strong>å¨é¨ç½²å°æ£æµå¼æä¹åä¸Slicelineçæçè§åå¹é çæµéï¼æ»å»çæªæ£æµåéï¼ã</li> 531<li><strong>绿è²ï¼</strong>èè²-æ©è²æ¶é´åºåãå¨å®æ½Slicelineçæçè§åå被认为æ¯äººç±»æµéã</li> 532<li><strong>红è²ï¼</strong>Slicelineçæçè§åå¹é å¹¶è¢«é»æ¢çHTTPç»å½æµéã</li> 533</ul> 534<p><font color="red">é¦å ï¼æ¸¸æå¹³å°çç»å½æµéåºç°äºä¸ä¸ªå°çå³°å¼ï¼èè²çº¿ï¼ï¼è¢«æä»¬çå¼å¸¸æ£æµç®æ³ææå°ã</font><font color="blue">ç¶åï¼Sliceline被åºç¨ï¼å¹¶çæäºä¸æ¡è§åï¼éå黿¢äºç±çº¢è²çº¿è¡¨ç¤ºçæææµéï¼å¨ä¸å¨å æ»è®¡è¶ è¿3ç¾ä¸ä¸ªè¯·æ±ã</font></p> 535<blockquote> 536<p>å¾8ï¼ä¸Slisline卿¸¸æå¹³å°ç»å½ç«¯ç¹ä¸çåºç¨ç¨åºç¸å ³çæ¶é´åºå
536</p> 537</blockquote> 538<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615725.png" style="zoom:33%;"></p> 539<p>ä¸é¢æ¾ç¤ºäºç¸åçé»å¡æµéï¼ä½æä»¬æ¾ç¤ºç䏿¯è¯·æ±å·ï¼èæ¯ä¸åIPçæ°éã<strong>è¶ è¿18.7ä¸ä¸ªä¸åçIPè¢«ç¨æ¥ååè¿æ¬¡æ»å»ã</strong></p> 540<blockquote> 541<p>å¾9ï¼å¨æ¸¸æå¹³å°ä¸è¿è¡åè¯å¡«å æ»å»æ¶ï¼IPå°åçä¸åæ°é/3h</p> 542</blockquote> 543<p><img src="https://lzy-picture.oss-cn-beijing.aliyuncs.com/img/202305141615075.png" style="zoom: 50%;"></p> 544<p>è½ç¶æä»¬å©ç¨Slicelineå¨ä¸åçML管éä¸çæè§åï¼ä½æä»¬ç»ååºäºæµå¼å¤ççå¼å¸¸æ£æµåSlicelineçæ¹æ³è½å¤ä¿æ¤ç»å½ç»ç«¯ï¼æ¯ä¸ªæè·¨å¤ä¸ªå®¢æ·é»æ¢çº¦220䏿¬¡æ¶æç»å½å°è¯ã</p> 545<h3><span id="å-ç»è®º">åãç»è®º</span></h3> 546<p><font color="red">为äºç»è¿ä¼ ç»çBotæ£æµææ¯ï¼å¦åºäºIPçéçéå¶ååºäºç¾åç黿¢ï¼Botè¶åäºå¨æ°å个IPå°åä¸åå¸å ¶æ»å»ï¼å¹¶é¢ç¹æ´æ¹å ¶æçº¹ã</font>æä»¬æåºäºä¸ç§ç»ååºäºæµå¼å¤ççå¼å¸¸æ£æµåSlicelineçæ¹æ³æ¥æ£æµåå¸å¼Botæ»å»ã</p> 547<p>è½ç¶Slicelineæåæ¯ä½ä¸ºä¸ç§ML模åè°è¯ç®æ³æåºçï¼ä½æä»¬å±ç¤ºäºå¦ä½ä½¿ç¨å®æ¥çæä¸æ¶æBotæµéæ´»å¨å¹é çè§åãè¿ç§æ¹æ³ä½¿æä»¬è½å¤æ¯æè·¨å¤ä¸ªå®¢æ·é»æ¢çº¦220䏿¬¡æ¶æç»å½å°è¯ã</p> 548<p>æä»¬å®ç°å¹¶å¼æºäºSlicelineçä¼åPythonçæ¬ãæä»¬éåäºé¨å代ç ï¼å©ç¨äºç©éµä¹æ³åç¨çç©éµï¼ç¸æ¯Rå®ç°ï¼é度æåäº1000åã</p> 549<p>卿¬æä¸ï¼æä»¬ä½¿ç¨åå¸å¼Botæ»å»æ£æµé®é¢å±ç¤ºäºæä»¬çæ¹æ³ãç¶èï¼æä»¬çæ¹æ³å®å ¨ä¸ä¾èµäºè§å弿ï¼å¯ä»¥åºç¨äºå ¶ä»ç½ç»å®å ¨è®¾ç½®ï¼åªè¦è½å¤å®ä¹æ£å¸¸åå¼å¸¸è¡ä¸ºçç»ã</p> 550<h3><span id="åèæç®">åèæç®</span></h3> 551<p>[1] <a target="_blank" rel="noopener" href="https://datadome.co/">https://datadome.co/</a></p> 552<p>[2] Jacob, Gregoire, Engin Kirda, Christopher Kruegel, and Giovanni 553Vigna. "PUBCRAWL: Protecting Users and Businesses from CRAWLers." In 554USENIX Security Symposium, pp. 507-522. 2012.</p> 555<p>[3] Bursztein, Elie, et al. "Picasso: Lightweight device class 556fingerprinting for web clients." Proceedings of the 6th Workshop on 557Security and Privacy in Smartphones and Mobile Devices. 2016.</p> 558<p>[4] Vastel, Antoine, et al. "FP-Crawlers: studying the resilience of 559browser fingerprinting to block crawlers." MADWeb'20-NDSS Workshop on 560Measurements, Attacks, and Defenses for the Web. 2020.</p> 561<p>[5] Li, Xigao, et al. "Good bot, bad bot: Characterizing automated 562browsing activity." 2021 IEEE symposium on security and privacy (sp). 563IEEE, 2021.</p> 564<p>[6] Sagadeeva, Svetlana, and Matthias Boehm. "Sliceline: Fast, 565linear-algebra-based slice finding for ml model debugging." Proceedings 566of the 2021 International Conference on Management of Data. 2021.</p> 567<p>[7] <a target="_blank" rel="noopener" href="https://github.com/DataDome/sliceline">https://github.com/DataDome/sliceline</a></p> 568<p>[8] <a target="_blank" rel="noopener" href="https://flink.apache.org/">https://flink.apache.org/</a></p> 569<h3><span id="ç¸å ³é¾æ¥">ç¸å ³é¾æ¥</span></h3> 570<ul> 571<li><a target="_blank" rel="noopener" href="https://datadome.co/datadome_events/black-hat-asia-2023-here-we-come/">https://datadome.co/datadome_events/black-hat-asia-2023-here-we-come/</a></li> 572<li><a target="_blank" rel="noopener" href="https://www.blackhat.com/asia-23/briefings/schedule/index.html#leveraging-streaming-based-outlier-detection-and-sliceline-to-stop-heavily-distributed-bot-attacks-30984">Leveraging 573Streaming-Based Outlier Detection and SliceLine to Stop Heavily 574Distributed Bot Attacks</a></li> 575<li><a target="_blank" rel="noopener" href="https://mboehm7.github.io/resources/sigmod2021b_sliceline.pdf">SliceLine: 576Fast, Linear-Algebra-based Slice Finding for ML Model Debugging</a></li> 577<li><a target="_blank" rel="noopener" href="https://www.blackhat.com/asia-23/sponsored-sessions/schedule/index.html#war-of-the-bots-learnings-from-thwarting-new-automated-attack-vectors-32031">War 578of the Bots: Learnings from Thwarting New Automated Attack 579Vectors</a></li> 580</ul> 581 582 </div> 583 584 585 586 587 588 <footer class="post-footer"> 589 590 591<div class="post-copyright"> 592<ul> 593 <li class="post-copyright-author"> 594 <strong>æ¬æä½è ï¼ </strong>lzy 595 </li> 596 <li class="post-copyright-link"> 597 <strong>æ¬æé¾æ¥ï¼</strong> 598 <a href="https://powerlzy.github.io/posts/A8WZ9F/" title="æµéåä½å¼ï¼3ï¼2023 BlackHat-Leveraging Streaming-Based Outlier Detection and SliceLine to Stop Heavily Distributed Bot Attacks">https://powerlzy.github.io/posts/A8WZ9F/</a> 599 </li> 600 <li class="post-copyright-license"> 601 <strong>çæå£°æï¼ </strong>æ¬åå®¢æææç« é¤ç¹å«å£°æå¤ï¼åéç¨ <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/zh-CN" rel="noopener" target="_blank"><i class="fab fa-fw fa-creative-commons"></i>BY-NC-SA</a> 许å¯åè®®ã转载请注æåºå¤ï¼ 602 </li> 603</ul> 604</div> 605 606 <div class="post-tags"> 607 <a href="/tags/%E5%B7%A5%E4%B8%9A%E8%90%BD%E5%9C%B0/" rel="tag"># å·¥ä¸è½å°</a> 608 <a href="/tags/%E4%B8%9A%E5%8A%A1%E5%AE%89%E5%85%A8/" rel="tag"># ä¸å¡å®å ¨</a> 609 <a href="/tags/API%E5%AE%89%E5%85%A8/" rel="tag"># APIå®å ¨</a> 610 <a href="/tags/BlackHat/" rel="tag"># BlackHat</a> 611 <a href="/tags/Distributed-Bot-Attacks/" rel="tag"># Distributed Bot Attacks</a> 612 </div> 613 614 615 616 <div class="post-nav"> 617 <div class="post-nav-item"> 618 <a href="/posts/2C9003N/" rel="prev" title="è´¦å·å®å ¨ï¼2ï¼ãTODOãUncovering Large Groups of Active Malicious Accounts in Online Social Networks"> 619 <i class="fa fa-chevron-left"></i> è´¦å·å®å ¨ï¼2ï¼ãTODOãUncovering Large Groups of Active Malicious Accounts in Online Social Networks 620 </a> 621 </div> 622 <div class="post-nav-item"> 623 <a href="/posts/36T3ZZD/" rel="next" title="æµéåä½å¼ï¼9ï¼Imperva-War of the Bots-æºå¨äººåç½ç»å¨èæ¼å"> 624 æµéåä½å¼ï¼9ï¼Imperva-War of the Bots-æºå¨äººåç½ç»å¨èæ¼å <i class="fa fa-chevron-right"></i> 625 </a> 626 </div> 627 </div> 628 </footer> 629 </article> 630</div> 631 632 633 634 635 636 637</div> 638 </main> 639 640 <footer class="footer"> 641 <div class="footer-inner"> 642 643 644<div class="copyright"> 645 © 646 <span itemprop="copyrightYear">2024</span> 647 <span class="with-love"> 648 <i class="fa fa-heart"></i> 649 </span> 650 <span class="author" itemprop="copyrightHolder">lzy</span> 651</div> 652<div class="busuanzi-count"> 653 <span class="post-meta-item" id="busuanzi_container_site_uv">
654 <span class="post-meta-item-icon"> 655 <i class="fa fa-user"></i> 656 </span> 657 <span class="site-uv" title="æ»è®¿å®¢é"> 658 <span id="busuanzi_value_site_uv"></span> 659 </span> 660 </span> 661 <span class="post-meta-item" id="busuanzi_container_site_pv"> 662 <span class="post-meta-item-icon"> 663 <i class="fa fa-eye"></i> 664 </span> 665 <span class="site-pv" title="æ»è®¿é®é"> 666 <span id="busuanzi_value_site_pv"></span> 667 </span> 668 </span> 669</div> 670 671<!-- 672 <div class="powered-by">ç± <a href="https://hexo.io/" rel="noopener" target="_blank">Hexo</a> & <a href="https://theme-next.js.org/pisces/" rel="noopener" target="_blank">NexT.Pisces</a> 强åé©±å¨ 673 </div>--> 674<!-- ç½ç«è¿è¡æ¶é´ç设置 --> 675<span id="timeDate">è½½å ¥å¤©æ°...</span> 676<span id="times">è½½å ¥æ¶åç§...</span>
677<script> 678 var now = new Date(); 679 function createtime() { 680 var grt= new Date("03/01/2023 10:00:00"); //æ¤å¤ä¿®æ¹ä½ çå»ºç«æ¶é´æè ç½ç«ä¸çº¿æ¶é´ 681 now.setTime(now.getTime()+250); 682 days = (now - grt ) / 1000 / 60 / 60 / 24; dnum = Math.floor(days); 683 hours = (now - grt ) / 1000 / 60 / 60 - (24 * dnum); hnum = Math.floor(hours); 684 if(String(hnum).length ==1 ){hnum = "0" + hnum;} minutes = (now - grt ) / 1000 /60 - (24 * 60 * dnum) - (60 * hnum); 685 mnum = Math.floor(minutes); if(String(mnum).length ==1 ){mnum = "0" + mnum;} 686 seconds = (now - grt ) / 1000 - (24 * 60 * 60 * dnum) - (60 * 60 * hnum) - (60 * mnum); 687 snum = Math.round(seconds); if(String(snum).length ==1 ){snum = "0" + snum;} 688 document.getElementById("timeDate").innerHTML = "æ¬ç«å·²å®å ¨è¿è¡ "+dnum+" 天 "; 689 document.getElementById("times").innerHTML = hnum + " å°æ¶ " + mnum + " å " + snum + " ç§."; 690 } 691setInterval("createtime()",250); 692</script>
692 693 694 </div> 695 </footer> 696 697 698 699 <a href="https://github.com/PowerLZY" class="github-corner" title="å¨ GitHub ä¸å ³æ³¨æ" aria-label="å¨ GitHub ä¸å ³æ³¨æ" rel="noopener" target="_blank"><svg width="80" height="80" viewBox="0 0 250 250" aria-hidden="true"><path d="M0,0 L115,115 L130,115 L142,142 L250,250 L250,0 Z"></path><path d="M128.3,109.0 C113.8,99.7 119.0,89.6 119.0,89.6 C122.0,82.7 120.5,78.6 120.5,78.6 C119.2,72.0 123.4,76.3 123.4,76.3 C127.3,80.9 125.5,87.3 125.5,87.3 C122.9,97.6 130.6,101.9 134.4,103.2" fill="currentColor" style="transform-origin: 130px 106px;" class="octo-arm"></path><path d="M115.0,115.0 C114.9,115.1 118.7,116.5 119.8,115.4 L133.7,101.6 C136.9,99.2 139.9,98.4 142.2,98.6 C133.8,88.0 127.5,74.4 143.8,58.0 C148.5,53.4 154.0,51.2 159.7,51.0 C160.3,49.4 163.2,43.6 171.4,40.1 C171.4,40.1 176.1,42.5 178.8,56.2 C183.1,58.6 187.2,61.8 190.9,65.4 C194.5,69.0 197.7,73.2 200.1,77.6 C213.8,80.2 216.3,84.9 216.3,84.9 C212.7,93.1 206.9,96.0 205.4,96.6 C205.1,102.4 203.0,107.8 198.3,112.5 C181.9,128.9 168.3,122.5 157.7,114.1 C157.9,116.9 156.7,120.9 152.7,124.9 L141.0,136.5 C139.8,137.7 141.6,141.9 141.8,141.8 Z" fill="currentColor" class="octo-body"></path></svg></a> 700 701<noscript> 702 <div class="noscript-warning">Theme NexT works best with JavaScript enabled</div> 703</noscript> 704 705 706 707
707<script src="https://cdnjs.cloudflare.com/ajax/libs/animejs/3.2.1/anime.min.js" integrity="sha256-XL2inqUJaslATFnHdJOi9GfQ60on8Wx1C2H8DYiN1xY=" crossorigin="anonymous"></script>
vendor: 1 bytes, line 707
707
708<script src="/js/comments.js"></script>
708<script src="/js/utils.js"></script>
708<script src="/js/motion.js"></script>
708<script src="/js/next-boot.js"></script>
708 709 710
710<script src="https://cdnjs.cloudflare.com/ajax/libs/hexo-generator-searchdb/1.4.1/search.js" integrity="sha256-1kfA5uHPf65M5cphT2dvymhkuyHPQp5A53EGZOnOLmc=" crossorigin="anonymous"></script>
vendor: 1 bytes, line 710
710
711<script src="/js/third-party/search/local-search.js"></script>
711 712 713 714
714<script class="next-config" data-name="mermaid" type="application/json">{"enable":true,"theme":{"light":"default","dark":"dark"},"js":{"url":"https://cdnjs.cloudflare.com/ajax/libs/mermaid/9.4.3/mermaid.min.js","integrity":"sha256-e0o3JYsdjqKajf9eOe22FhioYSz9WofRY4dLKo3F6do="}}</script>
714 715
715<script src="/js/third-party/tags/mermaid.js"></script>
715 716 717 718
718<script src="/js/third-party/pace.js"></script>
718 719 720 721
721<script async src="https://busuanzi.ibruce.info/busuanzi/2.3/busuanzi.pure.mini.js"></script>
721 722 723 724 725 726 727 728
728<script class="next-config" data-name="enableMath" type="application/json">true</script>
728<script class="next-config" data-name="mathjax" type="application/json">{"enable":true,"tags":"all","js":{"url":"https://cdnjs.cloudflare.com/ajax/libs/mathjax/3.2.2/es5/tex-mml-chtml.js","integrity":"sha256-MASABpB4tYktI2Oitl4t+78w/lyA+D7b/s9GEP0JOGI="}}</script>
vendor: 1 bytes, line 728
728
729<script src="/js/third-party/math/mathjax.js"></script>
729 730 731 732 733 734
734<script src="//cdn.jsdelivr.net/npm/js-base64/base64.min.js"></script>
734 735
735<script> 736 const hasAttr = (e,a) => a.some(_=> e.attr(_)!==undefined); 737 $('a').each(function() { 738 const $this = $(this); 739 if(hasAttr($this,["data-fancybox","ignore-external-link"])) return; 740 const href = $this.attr('href'); 741 if (href && href.match('^((http|https|thunder|qqdl|ed2k|Flashget|qbrowser|ftp|rtsp|mms)://)')) { 742 const strs = href.split('/'); 743 if (strs.length >= 3) { 744 const host = strs[2]; 745 if (host !== 'powerlzy.github.io' || window.location.host) { 746 $this.attr('href', '/go.html?u='+Base64.encode(href)+'').attr('rel', 'external nofollow noopener noreferrer'); 747 if (true) { 748 $this.attr('target', '_blank'); 749 } 750 } 751 } 752 } 753 }); 754 </script>
754</body> 755</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.