This is based on a work-in-progress patch I already had. #9 describes different categories:
an attacker compromising/utilizing a large number of machines (botnet) to perform an attack (DDoS) against a service
an attacker attempting to impersonate a victim (account takeover/credential theft)
collaborative anti-abusive and threat intelligence sharing
This patch takes a slightly different approach and enumerates more specific classes of attack/malicious activity. I'm not tied to this, but I think being more specific now will help us in the future.
This is based on a work-in-progress patch I already had. #9 describes different categories:
This patch takes a slightly different approach and enumerates more specific classes of attack/malicious activity. I'm not tied to this, but I think being more specific now will help us in the future.