scrapesentry service description

SCRAPESENTRY
SERVICE
DESCRIPTION
SERVICE DESCRIPTION
Protect your business from malicious scraping with ScrapeSentry
Scraping defined
Scraping is when information is systematically and illegally copied from websites and databases. The end goal is most commonly to divert traffic, and in the long run revenue, away from
your site to sites controlled by the scrapers. Scrapers take for free what companies have spent
large sums to develop.
If you operate a major website there is a risk that a large proportion of the traffic to the site is
generated by scrapers. The scraping traffic seldom shows up in web traffic measurement tools
but rather acts as a more or less silent load on the website. As scrapers often hit the website at
very high rates they can cause significant load on servers and infrastructure.
ScrapeSentry blocks scraping and adds business value
The ScrapeSentry service, developed by Sentor, have been sucessfully provided to leading
online brands since 2006 creating great business value for our customers. ScrapeSentry gives
you:
- Extended knowledge of site users
- Better control over content
- Reduced infrastructure costs
- Improved site availability
2
Stop malicous scraping without affecting legitimate scrapers
It is complicated to stop malicious scrapers. They use sophisticated methods to hide themselves,
especially once they realise they have been detected and as a consequence getting
blocked. To further complicate the matter, most sites welcome some scraping; like major search
engines or partners and it is imperative that this traffic must not at any time be blocked.
Challenges
- Differentiating normal users from malicious scrapers
- Differentiating bening scrapers from malicious scrapers
- Detecting and blocking malicious scrapers without affecting normal users
- Detecting distributed scrapers using thousands of IP addresses
- Analyse the traffic for signs of previously undetected scraping methods and escalate it to
development
ScrapeSentry is developed to combat scraping
ScrapeSentry is a fully managed 24/7 service, monitored and developed by experts at preventing
scraping. Preventing scraping will always be an arms race, the scrapers are highly
motivated and professional, and to stay on top of the problem, prevention systems need to be
continiously developed and monitored. The Sentor team have more experience than anyone
else in the world in handling malicious scraping.
3
ScrapeSentry - How it works
A fully managed ScrapeSentry appliance is securely installed on a mirror port at a customer’s
site. This appliance sniffs all the requests to the site with no adverse impact on normal traffic.
User requests are analyzed by over 50 different tests in real time to understand if they are
legitimate. All known illegitimate traffic is automatically blocked according to a tailored
predetermined response plan.
Behavioural analysis
Any new type of suspicious behaviour detected is further analysed by correlating a potential
threat to both a short-term traffic database and a long term known offender database.
Suspicious activity results in the creation of a scraping incident case. The case is investigated
by operators at Sentor’s Security Operations Centre (SOC) in line with Sentor’s client-specific
scraping response process. If the suspicious behaviour is indeed the work of a scraper the
operator will issue an appropriate block order against that specific IP address, header, session,
etc. – immediately putting an end to the scraping attacks.
Full customer visibility and insight
A report is created for each incident that in turn is presented to easyJet via Sentor’s Security
Management Portal (SMP). The SMP also provides comprehensive reporting capabilities to
track scraping trends and keep metrics comparable over time.
ScrapeSentry Architecture
Internet
Web Users
External Users
Customers
Robots
Internet
traffic
Managed Service
Sentor Security Operation 24/7
& Security Management Portal
Mirror port
All traffic
monitored
stealthily
Website
Web Server
Application Servers
Blocking
options
4
ScrapeSentry
Detection Appliance
ScrapeSentry benefits
- A cost effective security delivery 24/7
- Next generation detection and prevention for the next generation threats
- A dedicated security partner, security is Sentors core business
- A dedicated Technical Account Manager (TAM)
- A bespoke tailored solution based on customer needs and requirements
- A solution managed and developed by the leading experts in scraping prevention
- SLA and IRP driven delivery with a single point of contact for all security incidents
- A foreseeable cost of ownership
Our methodology
Together we define
acceptable use of
the website. We
analyze the traffic
and follow up
results with you.
5
Sentor refines
reporting to fit
your needs.
Sentor establishes
an Incident
Response Plan
together with you
to define how
different types of
abuse should be
handled.
When the service
is live Sentor holds
monthly review
meetings together
with you to
evaluate service
performance and
pick up on any
additional needs.
Sentor continuously
analyses the traffic
to your websites and
the analysts feed back
to the development
team any improvements the system may
need in terms of
detection.
About Sentor
The company behind the ScrapeSentry Anti Scraping system is Sentor Managed Security
Services. It was set up in 1998 to provide expertise in information security and online security in
particular. The ScrapeSentry Anti Scraping services are a core part of our service offering and
the most rapidly expanding business area within Sentor.
We have been providing ScrapeSentry Anti Scraping services 24/7 since 2006 and have
development team constantly developing our service platform. Today we have over 30 experts
working with R&D and scraping protection for some of the world’s best-known online brands.
Contact us
We are operating within the strictest integrity and confidentiality.
Head Office
Björns Trädgårdsgränd 1
116 21 Stockholm, Sweden
+46 8 545 333 00
[email protected]
US Office
321 K Street
South Boston, MA 02127
1-800-351-1691
[email protected]
Visit us online
Read more about Sentor’s ScrapeSentry service:
www.scrapesentry.com
Company page
www.sentormss.com
6
UK Office
35-37 Blockstock Road
London N4 2JF, UK
+44 77 69 75 63 77
[email protected]