Preventing Bonus Hunting by Configuring Service Cookies and System IDs

Application Scenarios

• Scenario 1: To steal extra bonus (such as goods in promotions or downloads), a malicious actor may use the same account to send requests to a website by changing IP addresses or terminals.

  Protective measures: Using Cookies (or User IDs) to Configure a Path-based CC Attack Protection Rule

• Scenario 2: To steal extra bonus (such as goods in promotions or downloads), a malicious actor may use multiple accounts to send requests to a website through the same PC by frequently changing its IP address.

  Protective measures: Using a System ID to Configure a Path-based CC Attack Protection Rule

Using Cookies (or User IDs) to Configure a Path-based CC Attack Protection Rule

1. Log in to the EdgeSec console.
2. In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
3. In the Policy column of the row containing the target domain name, click the number of enabled protection rules. On the page displayed, confirm that the status of CC attack protection is enabled () and click Customize Rule.
4. In the upper left corner of the CC Attack Protection page, click Add Rule. Use service cookies to configure the CC attack rate limit mode based on paths. Enter the service cookie or user ID. For details, see Figure 1.
   Figure 1 Configuring service cookies
   

5. Click Confirm.

Using a System ID to Configure a Path-based CC Attack Protection Rule

1. Log in to the EdgeSec console.
2. In the navigation pane on the left, choose Edge Security > Website Settings. The Website Settings page is displayed.
3. In the Policy column of the row containing the target domain name, click the number of enabled protection rules. On the page displayed, confirm that the status of CC attack protection is enabled () and click Customize Rule.
4. In the upper left corner of the CC Attack Protection page, click Add Rule. Configure a CC attack protection rule using system ID like HWSESID to limit traffic to the path. Figure 2 shows an example rule.
   Figure 2 System ID
   

5. Click Confirm.