how the bots act impacts premium onsales and the ticketing industry ecosystem
TRANSCRIPT
![Page 1: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/1.jpg)
![Page 2: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/2.jpg)
▪Introduction▪Bots 101▪BOTS Act and what it covers (and doesn’t cover)▪How bots can impact your major onsales and
associated mitigation strategies ▪StubHub case study▪Q&A
![Page 3: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/3.jpg)
Rami EssaidCEO & Co-founder, Distil Networks
Niels SodemannCEO & Co-founder, Queue-it
Distil Networks is the only proactive and precise bot mitigation solution for web applications, mobile, and APIs.
▪Founded in 2011▪180 employees▪5 offices▪$65 million in funding
The use of Queue-it has ensured online fairness during high-demand online events for more than 1.5 billion consumers worldwide. ▪Founded in 2010▪63 employees▪2016 TTA winner of Supplier of the Year
DenmarkSilicon Valley
![Page 4: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/4.jpg)
Awards and Analyst Recognition
The only anti-bot solution to be included in Gartner’s Online Fraud Detection Market Guide 2-years running
“Distil’s ability to analyze behavior provides the best chance of detecting and blocking bot-driven attacks.”
“Clear innovation compared to similar services.”
2017 WINNER: Best Fraud Prevention Solution
![Page 5: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/5.jpg)
Telling the story together
![Page 6: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/6.jpg)
Bots 101
![Page 7: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/7.jpg)
Good bots▪ Search engine crawling▪ Power APIs▪ Check system connectivity & status
A ‘bot’ is an automated program that runs on the internet
Bad bots▪ Steal content▪ Scan for vulnerabilities ▪ Perform fraud etc.
Traffic Distribution by Type, 2016
![Page 8: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/8.jpg)
What concerns you most about the impact of bots on your organization’s website(s)?
▪ Website Security▪ Transaction Fraud▪ Lost Revenue to Scalpers▪ Poor Customer Experience
Survey
![Page 9: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/9.jpg)
How are you addressing your bot concerns?
▪ Addressing now▪ Plan to address this year▪ Plan to address next year▪ No plans to address▪ Don’t know
Survey
![Page 10: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/10.jpg)
The BOTS Act explained
![Page 11: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/11.jpg)
▪ Prohibits the circumvention of a security measure used to enforce ticket purchasing limits for an event with an attendance capacity > 200 pers.
▪ Prohibits the sale of an event ticket obtained through such a circumvention violation if the seller participated in, had the ability to control, or should have known about it
BOTS Act key prohibitions
![Page 12: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/12.jpg)
▪Scalping▪Sniping▪Spinning
20% of traffic bad bots
OWASP Automated Threats relevant to BOTS Act
![Page 13: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/13.jpg)
Ticketing Bots Sophistication
![Page 14: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/14.jpg)
Other legislation
![Page 15: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/15.jpg)
▪Must Have ProtectionsProhibits the circumvention of a security measure used to enforce ticket purchasing limits for an event with an attendance capacity > 200 pers.
Who does it impact? Primary Ticketing.
▪Federal Trade Commission Audits:
Treats violations as unfair or deceptive acts under the FTC Act. The bill provides authority to the FTC and states to enforce against such violations
![Page 16: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/16.jpg)
▪Must Have ProtectionsProhibits the circumvention of a security measure used to enforce ticket purchasing limits for an event with an attendance capacity > 200 pers.
Who does it impact? Secondary Ticketing.
▪FTC Audits Treats violations as unfair or deceptive acts under the FTC Act, provides authority to the FTC and states to enforce against such violationsProhibits the sale of an event ticket obtained through such a circumvention violation if the seller participated in, had the ability to control, or should have known about it
![Page 17: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/17.jpg)
Can you enforce?
Who does this impact? Venues.
Can you comply? Can you cooperate?
![Page 18: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/18.jpg)
If you aren’t bypassing security measures on a website in order to get tickets, you aren’t breaking the law.
▪ Doesn’t eliminate the ability to buy & resell tickets obtained legally
▪ Doesn’t address historical relationships between sellers and reseller
▪ Doesn’t make the 40% of tickets not on public sale magically reappear
What the BOTS Act does not address
![Page 19: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/19.jpg)
▪Bots: scapegoat for a bigger problem in ticketing
▪Humans + scripts: Cubefarm of people operating bots with industry experts managing them
▪7 years + $25M later, FBI cracks down in 2010
▪Ken Lowson now a wiseguy turned good
…and then there’s Wiseguys
Source: https://motherboard.vice.com/en_us/article/the-man-who-broke-ticketmaster
![Page 20: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/20.jpg)
▪Precise log in, processing thousands of purchases faster than any human
▪Fooling CAPTCHA, with huge database of combinations + operating at lightning speed
▪Securing best seats & selling them at a steep markup for resale to the public
How they did it
Source: U.S. Attorney Office, The Star Ledger
![Page 21: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/21.jpg)
Other ‘wiseguys’ like ShowsOnSale continue to pop up, historically hard & expensive to prosecute
![Page 22: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/22.jpg)
Why you can’t sell out in 20 minutes
Ticket onsales timeline
It’s not possible to sell out in less than 2x basket/cart timeout time
More info: https://queue-it.com/presentation-can-you-sell-out-in-2-minutes-no-learn-why/
![Page 23: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/23.jpg)
![Page 24: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/24.jpg)
In other words, as a venue, organization or ticketing software platform, it is still on you to defend against this fraudulent activity during your major onsales
![Page 25: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/25.jpg)
How bots abuse the logic of online ticket sales
Distil Networks Queue-it Distil Networks
![Page 26: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/26.jpg)
Before onsale: Account Creation
Distil Networks Queue-it Distil Networks
![Page 27: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/27.jpg)
Before onsale: Account Takeover
Distil Networks Queue-it Distil Networks
![Page 28: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/28.jpg)
Account Takeover Attacks
![Page 29: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/29.jpg)
Financial fraudTargets are accounts at financial or e-commerce services that store users’ banking details. The attackers perform unauthorized withdrawal from bank accounts or fraudulent transactions using the credit/debit cards on file.This includes virtual currency such as bitcoin, in-game currency, and rewards programs. This is all worth real money.
Account Takeover Attacks: Why?SpamSpam can appear in any service feature that accepts user-generated content, including discussion forums, direct messages, and reviews/ratings, degrading platform integrity and brand reputation.
PhishingAttackers can assume a compromised user’s identity and launch phishing attacks on others in his/her social circle to steal their credentials, personal information, or sensitive data.
![Page 30: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/30.jpg)
“Over 50% of web applications attacks use stolen credentials.”
“An attack on one company is a potential threat to all companies.”
“Mitigating these types of account takeovers is critical to maintaining customer loyalty.”
Breaches in the News
Image: Verizon
Sources: Krebsonsecurity.com, Bankinfosecurity.com, Bloomberg.com, & Privacyandsecuritymatters.com, Verizon Data Breach Incident Report
Hotmail - 33M Logins/Pwds - May 2016LinkedIn - 167M Logins/Pwds - Nov 2012VK.com - 100M Logins/Pwds - June 2016Mail.ru - 57M Logins/Pwds- May 2016Yahoo! - 40M Logins/Pwds - May 2015Tumblr - 65M Logins/Pwds - June 2016
![Page 31: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/31.jpg)
Account Takeover Bots Sophistication
![Page 32: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/32.jpg)
Day of onsale / During onsale
Distil Networks Queue-it Distil Networks
![Page 33: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/33.jpg)
Volume
Distil Networks Queue-it Distil Networks
![Page 34: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/34.jpg)
Volume▪To achieve this, spinner bots
create many hits
▪Queue-it can recognize this as coming from same device and will block
▪50% of blocking during a major onsale is due to spinner bots
![Page 35: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/35.jpg)
Speed
Distil Networks Queue-it Distil Networks
![Page 36: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/36.jpg)
Speed▪Any speed scripted
bots arriving before the event are placed in the randomized pre-event waiting room before the event launches
Pre-event queue page Live event queue page
![Page 37: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/37.jpg)
During ticket purchase
Distil Networks Queue-it Distil Networks
![Page 38: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/38.jpg)
Credit card fraud
![Page 39: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/39.jpg)
Multiple purchases, exceeding limits
Distil Networks Queue-it Distil Networks
![Page 40: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/40.jpg)
IP Address
Header & User Agent InformationCookie Browser 200+ Attributes of data Navigator, WebGL, Plugins, Audio, Video, etc.
Tamper proofing layer
Distil Hi-Def Fingerprint
Identification Must Go Beyond the IP Address...
![Page 41: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/41.jpg)
StubHub Case Study
![Page 42: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/42.jpg)
StubHub Case StudyAccount Takeover and Fraud
“Distil helped us greatly reduce transaction fraud and account takeovers.”
Marty BoosCIO, StubHub
![Page 43: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/43.jpg)
StubHub Case StudyTicket Scraping
“Competitive data mining for ticket prices and inventory information was a constant threat.”
Marty BoosCIO, StubHub
![Page 44: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/44.jpg)
StubHub Case StudySkewed Conversion Tracking
“The number of conversions were greatly deflated because of bad bot traffic. Now that we’re filtering bad bot traffic out, we’re able to see what the real data is and make decisions based on real visitors.”
Marty BoosCIO, StubHub
![Page 45: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/45.jpg)
StubHub Case Study Conclusions In reference to the before, wait and buyer journey:“I like this multi-layered approach”
George Loyer, Director Technical Operations, StubHub
Distil Networks Queue-it Distil Networks
![Page 46: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/46.jpg)
Q&A
Rami EssaidCEO & Co-founder, Distil Networks
Niels SodemannCEO & Co-founder, Queue-it
![Page 47: How the BOTS Act Impacts Premium Onsales and the Ticketing Industry Ecosystem](https://reader031.vdocuments.net/reader031/viewer/2022030313/58ce91721a28ab8c3b8b58a3/html5/thumbnails/47.jpg)
Free trial Free trial
www.distilnetworks.com/trial www.queue-it.com/free-trial