介绍增强的旋转门分析

攻击者越来越多地使用更复杂的方法，不仅将其逼迫进入您的网站，还模拟了真实的用户行为

Attackers are increasingly using more sophisticated methods to not just brute force their way into your sites but also simulate real user behavior for targeted harmful activity like account takeovers, credential stuffing, fake account creation, content scraping, and fraudulent transactions. They are no longer trying to simply take your website down or gain access to it, but rather cause actual business harm.

攻击者越来越多地使用更复杂的方法，不仅将蛮力迫使他们进入您的网站，还模拟了目标有害活动的真实用户行为，例如收购，凭证填充，伪造帐户创建，内容刮擦和欺诈性交易。他们不再试图简单地将您的网站降低或访问该网站，而是造成实际的业务危害。

There is also the increasing complexity added by attackers rotating IP addresses, routing through proxies, and using VPNs. In this evolving security landscape, meaningful analytics matter. Many traditional CAPTCHA solutions provide simplistic pass or fail trends on challenges without insights into traffic patterns or behavior. Cloudflare Turnstile aims to equip you with more than just basic trends, so you can make informed decisions and stay ahead of the attackers.

攻击者旋转IP地址，通过代理路线和使用VPN添加了越来越多的复杂性。在这种不断发展的安全格局中，有意义的分析很重要。许多传统的验证验证解决方案在挑战方面提供了简单的通行证或失败趋势，而无需深入了解交通模式或行为。 Cloudflare旋转栅门的目的不仅是为您提供基本趋势，因此您可以做出明智的决定并保持攻击者的领先地位。

We are excited to introduce a major upgrade to Turnstile Analytics. With these upgraded analytics, you can identify harder-to-detect bots faster, and fine-tune your bot security posture with less manual log analysis than before. Turnstile, our privacy-first CAPTCHA alternative, has been helping you protect your applications from automated abuse while ensuring a seamless experience for legitimate users. Now, using enhanced analytics, you can gain deeper insights into your visitor traffic, challenge effectiveness, and potential security threats.

我们很高兴为旋转门分析引入重大升级。通过这些升级的分析，您可以更快地识别更困难的机器人，并通过比以前更少的手动日志分析微调机器人安全姿势。 Turnstile是我们的隐私优先验证码替代方案，一直在帮助您保护应用程序免受自动滥用的影响，同时确保为合法用户提供无缝的体验。现在，使用增强的分析，您可以更深入地了解访客流量，挑战效率和潜在的安全威胁。

Previously, Turnstile users had limited visibility into what types of bots were being blocked, what specific characteristics were exhibited by bots that were attacking your website, and what identifiable behavior they had. Customers had to manually sift through limited analytics, correlate Siteverify API responses, and cross-reference multiple sources to identify trends. The previous Turnstile analytics dashboard made it difficult to get a bird's eye view of Turnstile efficacy, identify any patterns of abuse, and drill down on the specifics of an attack to create additional rules and safeguards.

以前，旋转门用户对被阻止的机器人类型的可见性有限，攻击您网站的机器人展示了哪些特定特征以及它们的可识别行为。客户必须通过有限的分析，将SiteVerife API响应和交叉引用多个来源手动筛选，以识别趋势。以前的旋转门分析仪表板使得很难获得鸟类的旋转效果，确定任何滥用模式，并仔细研究攻击的细节，以创建其他规则和保障措施。

The new Turnstile Analytics surfaces all of this information in one place, making it easier than before to assess your visitor traffic patterns through Turnstile and take immediate action against suspicious activity.

新的旋转门分析将所有这些信息都浮出水面，这比以前更容易通过旋转门评估您的访客交通模式，并立即采取行动对可疑活动。

What’s new with Turnstile Analytics?

旋转门分析的新功能是什么？

The main motivation behind this release is to provide actionable insights that further strengthen the layers of protection and to give customers the ability to dissect visitor traffic by the most relevant attributes, so that identifying bot behavior patterns becomes easier. New features of Turnstile Analytics include: Top statistics

该版本背后的主要动机是提供可行的见解，以进一步加强保护层，并使客户能够通过最相关的属性解剖访客流量，以便识别机器人行为模式变得更加容易。旋转门分析的新功能包括：顶级统计数据

When you click into widget analytics under Turnstile in the Cloudflare Dashboard, you now have enhanced visibility of TopN statistics, and granular views of your traffic. The new TopN section is where you can view the top statistics of attributes such as hostname, autonomous system (ASN), user agent, browser, source IP address, country, and OS. This allows customers to analyze traffic at a more granular level and detect potential anomalies or patterns. You can analyze which browsers, user agents, ASNs, and locations generated the most failed challenges, making it easier to detect bot behavior patterns and anomalies in your visitor traffic. Suspicious IP addresses that have a high challenge failure rate can be proactively mitigated through additional security measures. For instance, if you have WAF custom rules in place based on suspicious IP addresses, you can in turn adjust your WAF custom rules based on the trends you see in Turnstile, strengthening your other layers of security even further.

当您单击Cloudflare仪表板中的旋转门下的Widget Analytics时，您现在可以提高对TOPN统计信息的可见性，并可以看到流量的颗粒状视图。新的TOPN部分是您可以查看诸如主机名，自主系统（ASN），用户代理，浏览器，源IP地址，country和OS等属性的顶部统计信息。这使客户能够以更精细的水平分析流量并检测潜在的异常或模式。您可以分析哪些浏览器，用户代理，ASN和位置产生了最失败的挑战，从而使访问者流量中的机器人行为模式和异常更加容易。具有较高挑战失败率的可疑IP地址可以通过其他安全措施积极缓解。例如，如果您根据可疑IP地址制定了WAF自定义规则，则可以根据您在旋转门中看到的趋势调整WAF自定义规则，从而进一步加强其他安全性。

TopN section of Turnstile Analytics

旋转门分析的顶部部分

Challenge outcomes

挑战成果

When a visitor encounters Turnstile, it issues a challenge to assess whether the visitor is a human or a bot, based on various signals. The Challenge outcomes section helps you evaluate what portion of your traffic is likely human or likely bots.

当访客遇到旋转门时，根据各种信号评估访客是人类还是机器人的挑战。挑战结果部分可帮助您评估流量中哪些可能是人类或可能的机器人。

The ability to easily monitor the effectiveness of Turnstile by looking at trends of Likely Human and Likely Bot metrics is important for peace of mind, knowing that the bots are being blocked and Turnstile is protecting your sites. But it’s also important to track changes in bot activity over time by monitoring challenge success and failure trends and across different attributes. You can detect anomalies in your traffic pattern and solve rates. For example, a sudden drop in solve rate overlaid with a surge in challenge attempts may indicate an attack. It is crucial to monitor bot behaviors and attacks that may be specific to your industry or to your business through Turnstile Analytics and correlate them with your internal security logs to keep your security rules up to date, to easily investigate any attacks, and to find areas of vulnerability.

通过查看可能的人类和可能的机器人指标的趋势，可以轻松监视旋转门的有效性，这对于安心的趋势很重要，因为他们知道机器人正在被阻止并且旋转门正在保护您的站点。但是，通过监视挑战成功和失败趋势以及跨不同属性来跟踪机器人活动随时间的变化也很重要。您可以检测到交通模式的异常并解决率。例如，随着挑战尝试的激增，求解率突然下降可能表明攻击。监视可能针对您的行业或通过旋转门分析特定的机器人行为和攻击，并将其与您的内部安全日志相关联，以使您的安全规则保持最新状态，轻松调查任何攻击，并找到脆弱性的领域。

Challenge outcomes section of Turnstile Analytics

旋转门分析的挑战成果部分

Solve rates

解决率

When the visitor successfully completes the challenge, the Solve rates section shows how the visitors have solved the challenge. Solve rates can be broken down into interactive solves, non-interactive solves, and pre-clearance solves. If you are using the managed mode, for example, you can see how many of your visitors required interaction with the widget and were prompted to check the box for Turnstile to verify that they are human.

当访客成功完成挑战时，解决率部分显示了访问者如何解决挑战。求解速率可以分解为交互式解决方案，非交互式溶液和前清除溶液。例如，如果您使用的是托管模式，则可以看到有多少访问者需要与小部件进行交互，并提示检查框架以验证旋转门以验证它们是人类的。

Solve rates section of Turnstile Analytics

解决旋转门分析的费率部分

Token validations

令牌验证

After a visitor successfully completes a Turnstile challenge, a token is generated that must be validated via the Siteverify API. The API response provides the ultimate outcome of our bot determination. Only rendering the widget on the client side

在访问者成功完成旋转范围挑战之后，将生成一个代币，必须通过SiteVerify API验证。 API响应提供了我们机器人确定的最终结果。仅在客户端渲染小部件