介紹增強的旋轉門分析

攻擊者越來越多地使用更複雜的方法，不僅將其逼迫進入您的網站，還模擬了真實的用戶行為

Attackers are increasingly using more sophisticated methods to not just brute force their way into your sites but also simulate real user behavior for targeted harmful activity like account takeovers, credential stuffing, fake account creation, content scraping, and fraudulent transactions. They are no longer trying to simply take your website down or gain access to it, but rather cause actual business harm.

攻擊者越來越多地使用更複雜的方法，不僅將蠻力迫使他們進入您的網站，還模擬了目標有害活動的真實用戶行為，例如收購，憑證填充，偽造帳戶創建，內容刮擦和欺詐性交易。他們不再試圖簡單地將您的網站降低或訪問該網站，而是造成實際的業務危害。

There is also the increasing complexity added by attackers rotating IP addresses, routing through proxies, and using VPNs. In this evolving security landscape, meaningful analytics matter. Many traditional CAPTCHA solutions provide simplistic pass or fail trends on challenges without insights into traffic patterns or behavior. Cloudflare Turnstile aims to equip you with more than just basic trends, so you can make informed decisions and stay ahead of the attackers.

攻擊者旋轉IP地址，通過代理路線和使用VPN添加了越來越多的複雜性。在這種不斷發展的安全格局中，有意義的分析很重要。許多傳統的驗證驗證解決方案在挑戰方面提供了簡單的通行證或失敗趨勢，而無需深入了解交通模式或行為。 Cloudflare旋轉柵門的目的不僅是為您提供基本趨勢，因此您可以做出明智的決定並保持攻擊者的領先地位。

We are excited to introduce a major upgrade to Turnstile Analytics. With these upgraded analytics, you can identify harder-to-detect bots faster, and fine-tune your bot security posture with less manual log analysis than before. Turnstile, our privacy-first CAPTCHA alternative, has been helping you protect your applications from automated abuse while ensuring a seamless experience for legitimate users. Now, using enhanced analytics, you can gain deeper insights into your visitor traffic, challenge effectiveness, and potential security threats.

我們很高興為旋轉門分析引入重大升級。通過這些升級的分析，您可以更快地識別更困難的機器人，並通過比以前更少的手動日誌分析微調機器人安全姿勢。 Turnstile是我們的隱私優先驗證碼替代方案，一直在幫助您保護應用程序免受自動濫用的影響，同時確保為合法用戶提供無縫的體驗。現在，使用增強的分析，您可以更深入地了解訪客流量，挑戰效率和潛在的安全威脅。

Previously, Turnstile users had limited visibility into what types of bots were being blocked, what specific characteristics were exhibited by bots that were attacking your website, and what identifiable behavior they had. Customers had to manually sift through limited analytics, correlate Siteverify API responses, and cross-reference multiple sources to identify trends. The previous Turnstile analytics dashboard made it difficult to get a bird's eye view of Turnstile efficacy, identify any patterns of abuse, and drill down on the specifics of an attack to create additional rules and safeguards.

以前，旋轉門用戶對被阻止的機器人類型的可見性有限，攻擊您網站的機器人展示了哪些特定特徵以及它們的可識別行為。客戶必須通過有限的分析，將SiteVerife API響應和交叉引用多個來源手動篩選，以識別趨勢。以前的旋轉門分析儀表板使得很難獲得鳥類的旋轉效果，確定任何濫用模式，並仔細研究攻擊的細節，以創建其他規則和保障措施。

The new Turnstile Analytics surfaces all of this information in one place, making it easier than before to assess your visitor traffic patterns through Turnstile and take immediate action against suspicious activity.

新的旋轉門分析將所有這些信息都浮出水面，這比以前更容易通過旋轉門評估您的訪客交通模式，並立即採取行動對可疑活動。

What’s new with Turnstile Analytics?

旋轉門分析的新功能是什麼？

The main motivation behind this release is to provide actionable insights that further strengthen the layers of protection and to give customers the ability to dissect visitor traffic by the most relevant attributes, so that identifying bot behavior patterns becomes easier. New features of Turnstile Analytics include: Top statistics

該版本背後的主要動機是提供可行的見解，以進一步加強保護層，並使客戶能夠通過最相關的屬性解剖訪客流量，以便識別機器人行為模式變得更加容易。旋轉門分析的新功能包括：頂級統計數據

When you click into widget analytics under Turnstile in the Cloudflare Dashboard, you now have enhanced visibility of TopN statistics, and granular views of your traffic. The new TopN section is where you can view the top statistics of attributes such as hostname, autonomous system (ASN), user agent, browser, source IP address, country, and OS. This allows customers to analyze traffic at a more granular level and detect potential anomalies or patterns. You can analyze which browsers, user agents, ASNs, and locations generated the most failed challenges, making it easier to detect bot behavior patterns and anomalies in your visitor traffic. Suspicious IP addresses that have a high challenge failure rate can be proactively mitigated through additional security measures. For instance, if you have WAF custom rules in place based on suspicious IP addresses, you can in turn adjust your WAF custom rules based on the trends you see in Turnstile, strengthening your other layers of security even further.

當您單擊Cloudflare儀表板中的旋轉門下的Widget Analytics時，您現在可以提高對TOPN統計信息的可見性，並可以看到流量的顆粒狀視圖。新的TOPN部分是您可以查看諸如主機名，自主系統（ASN），用戶代理，瀏覽器，源IP地址，country和OS等屬性的頂部統計信息。這使客戶能夠以更精細的水平分析流量並檢測潛在的異常或模式。您可以分析哪些瀏覽器，用戶代理，ASN和位置產生了最失敗的挑戰，從而使訪問者流量中的機器人行為模式和異常更加容易。具有較高挑戰失敗率的可疑IP地址可以通過其他安全措施積極緩解。例如，如果您根據可疑IP地址制定了WAF自定義規則，則可以根據您在旋轉門中看到的趨勢調整WAF自定義規則，從而進一步加強其他安全性。

TopN section of Turnstile Analytics

旋轉門分析的頂部部分

Challenge outcomes

挑戰成果

When a visitor encounters Turnstile, it issues a challenge to assess whether the visitor is a human or a bot, based on various signals. The Challenge outcomes section helps you evaluate what portion of your traffic is likely human or likely bots.

當訪客遇到旋轉門時，根據各種信號評估訪客是人類還是機器人的挑戰。挑戰結果部分可幫助您評估流量中哪些可能是人類或可能的機器人。

The ability to easily monitor the effectiveness of Turnstile by looking at trends of Likely Human and Likely Bot metrics is important for peace of mind, knowing that the bots are being blocked and Turnstile is protecting your sites. But it’s also important to track changes in bot activity over time by monitoring challenge success and failure trends and across different attributes. You can detect anomalies in your traffic pattern and solve rates. For example, a sudden drop in solve rate overlaid with a surge in challenge attempts may indicate an attack. It is crucial to monitor bot behaviors and attacks that may be specific to your industry or to your business through Turnstile Analytics and correlate them with your internal security logs to keep your security rules up to date, to easily investigate any attacks, and to find areas of vulnerability.

通過查看可能的人類和可能的機器人指標的趨勢，可以輕鬆監視旋轉門的有效性，這對於安心的趨勢很重要，因為他們知道機器人正在被阻止並且旋轉門正在保護您的站點。但是，通過監視挑戰成功和失敗趨勢以及跨不同屬性來跟踪機器人活動隨時間的變化也很重要。您可以檢測到交通模式的異常並解決率。例如，隨著挑戰嘗試的激增，求解率突然下降可能表明攻擊。監視可能針對您的行業或通過旋轉門分析特定的機器人行為和攻擊，並將其與您的內部安全日誌相關聯，以使您的安全規則保持最新狀態，輕鬆調查任何攻擊，並找到脆弱性的領域。

Challenge outcomes section of Turnstile Analytics

旋轉門分析的挑戰成果部分

Solve rates

解決率

When the visitor successfully completes the challenge, the Solve rates section shows how the visitors have solved the challenge. Solve rates can be broken down into interactive solves, non-interactive solves, and pre-clearance solves. If you are using the managed mode, for example, you can see how many of your visitors required interaction with the widget and were prompted to check the box for Turnstile to verify that they are human.

當訪客成功完成挑戰時，解決率部分顯示了訪問者如何解決挑戰。求解速率可以分解為交互式解決方案，非交互式溶液和前清除溶液。例如，如果您使用的是託管模式，則可以看到有多少訪問者需要與小部件進行交互，並提示檢查框架以驗證旋轉門以驗證它們是人類的。

Solve rates section of Turnstile Analytics

解決旋轉門分析的費率部分

Token validations

令牌驗證

After a visitor successfully completes a Turnstile challenge, a token is generated that must be validated via the Siteverify API. The API response provides the ultimate outcome of our bot determination. Only rendering the widget on the client side

在訪問者成功完成旋轉範圍挑戰之後，將生成一個代幣，必須通過SiteVerify API驗證。 API響應提供了我們機器人確定的最終結果。僅在客戶端渲染小部件