Case Study

Leading Online Learning Platform Eliminates Malicious Bots for Optimal Application Performance

HUMAN_Case-Study_Account-Takeover_Scraping_Online-Learning-Platform

Company

This leading global online learning and teaching platform is used by 80% of Fortune 100 companies. It offers more than 150,000 courses in 65 languages and serves more than 50 million users worldwide.

VP of Information Technology

Leading Online Learning Platform

“Application Protection was able to block all of the malicious traffic, rate limit at the edge and ease the load on our web infrastructure.”

Human-Case Study-Exclamation Mark Icons@2x

Challenge

Bots were being used to scrape and download content from the site. Because the online learning platform was primarily designed for streaming content, it was unable to handle the flood of concurrent content downloads and performance slowed significantly. 

In addition, many users complained that their accounts were compromised. Users’ login and password combinations were being validated by brute force credential stuffing attacks on the login page, leading to account takeovers (ATOs). As the team investigated, they also noticed a high number of bot-created fake accounts that were used to plagiarize content and post it on other platforms.


Human-Case Study-Shield checkmark icon@2x

Solution

The online learning platform The company wanted a solution that could manage bot traffic at the edge before unwanted requests reached its infrastructure. HUMAN Application Protection addressed the company’s application performance and bot attack challenges.

Application Protection is a behavior-based bot management solution that protects web and mobile applications and APIs from automated attacks safeguarding online revenue, competitive edge, and brand reputation.

  • Application performance: The platform’s CPU resources were being taxed by the volume of automated attacks. With Application Protection, they were able to block malicious traffic at the edge, limit specific types of bots attacking the system, and throttle traffic to keep the application running at its optimal level.
  • Scraping: Scraping bots were infiltrating its system to steal course content. Application Protection identified and blocked these scraping bots, which were often particularly sophisticated in their ability to mimic human behavior.
  • Account takeover and abuse: ATO bots were taking over valid user accounts or creating fake accounts to steal and resell gated content, such as practice quizzes. Over 80% of the traffic to the company’s login pages was from ATO bots. Application Protection defended against these attacks.

RESULTS

The ability to detect and mitigate bot activity with Application Protection yielded a number of positive results for the online learning platform.

  • Preserved performance: Application Protection kept the application platform performing at optimal levels and maintained better than 99.99% uptime. 
  • Maintained competitive edge: Reducing content scraping prevented competitors from stealing core content and enabled the company to maintain its competitive edge. 
  • Safeguarded user accounts: ATO attacks diminished, restoring customer confidence and improving brand reputation.

 

Connect with Us
to Learn More How HUMAN Can Mitigate Web Scraping Attacks for You

Related Resources