Technology / Privacy & Security
Cloudflare adds fast-flux detection to enterprise risk scoring
The optional behavior signal contributes to a user’s risk score when enabled.
Status: source-checked.
Cloudflare One has added fast-flux detection as a predefined behavior in its user and entity behavior analytics system, the company said Friday. Enabled detections contribute to a user’s risk score.
Fast flux rapidly changes the IP addresses associated with a domain. Cloudflare said attackers can use the technique to make malicious infrastructure harder to trace and shut down.
According to Cloudflare, the feature is available on Enterprise plans and must be turned on through the risk-behavior settings, according to the changelog. The announcement describes an investigation signal, not a guarantee that all fast-flux activity is malicious.
What we know / what we don't
What we know
- Cloudflare One has added fast-flux detection as a predefined behavior in its user and entity behavior analytics system, the company said Friday. Enabled detections contribute to a user’s risk score.
- Fast flux rapidly changes the IP addresses associated with a domain. Cloudflare said attackers can use the technique to make malicious infrastructure harder to trace and shut down.
- According to Cloudflare, the feature is available on Enterprise plans and must be turned on through the risk-behavior settings, according to the changelog. The announcement describes an investigation signal, not a guarantee that all fast-flux activity is malicious.
What we don't know
- No independent detection-rate or false-positive measurements were provided in the changelog.
The source record