SlideShare uma empresa Scribd logo
1 de 26
Baixar para ler offline
How Real User
Monitoring Reduces 3rd
Party Content Risk
Webinar
Cliff Crocker
VP Product - mPulse
Real User Measurement
T O D AY W E W I L L C O V E R …
• The impact of third-party resources on your site
• How to measure third-parties effectively
• Defining SLAs
• Reporting on third-party performance
– S T E V E S O U D E R S ’ W E B P E R F O R M A N C E G O L D E N R U L E
“80% of time is spent on the front-end.”
W H AT Y O U S E E
• <JavaScript>, stylesheets
• Images & other media
• Display ads
• Product reviews and
recommendations
• Personalization and placement
• Social media widgets
Pay no attention to the man behind
the curtain!
W H AT Y O U
D O N ’ T S E E
• Web analytics & marketing
• Tracking & targeting
• User experience measurement
(CEM & RUM)
• Tag management
• Top 25 retail sites from Alexa
• Examined Home page for each site using
WebPagetest.org
• Focused on the number of third-party domains
3 R D PA R T Y S T U D Y
3 R D PA R T Y S T U D Y
• Primary Domain: Within the control of the site owner
such as origin, image domains (CDN included)
• 3rd Party Domain: Hosted by a provider outside of
the control of the site owner
3 R D PA R T Y S T U D Y
Domains
Alexa Ranking
31
10
35
23
86
41
20
37
303131
4
48
38
42
16
11
6
28
68
31
36
4
198
212513351122532432351
7
3
7
17
Primary domains 3rd Party domains
3 R D PA R T Y S T U D Y - U N I Q U E D O M A I N S P E R PA G E
Domains:
Median - 32
Min - 25
Max - 87
3 R D PA R T Y S T U D Y
Compared to the HTTPArchive (All Sites) - average
number of domains is 17!!
91%
9%
91% of domains
are 3rd parties
3 R D PA R T Y S T U D Y
Front-end single point of failure occurs when a
document loads, but is blocked by a resource that
fails (in this case third-party) causing the entire site
to stop loading
(simulation)
F R O N T- E N D S I N G L E P O I N T O F FA I L U R E
1 5 O F 2 5 L A R G E S T O N L I N E R E TA I L E R S H AV E
A F R O N T- E N D S I N G L E P O I N T O F FA I L U R E
40%
12%
48%
Critical Non-Critical None
60% have a 3rd
party front-end
SPOF
T E S T I N G Y O U R S E L F F O R 3 R D PA R T Y
F R O N T- E N D S P O F
• SPOF-O-MATIC & WebPagetest
D E M O
O B J E C T L E V E L R U M
• Advances in browser technology make it possible to
collect performance at the object level from end users
• “Resource Timing” - supported in mainstream
browsers such as Chrome, IE, Android, Opera
R E S O U R C E T I M I N G
For each request, it is possible to capture timing below
http://www.w3.org/TR/resource-timing/
R E S O U R C E T I M I N G
• With one exception: Cross-origin requests (such as
third-party content)
• Request Start and End only by default
• Unless: Timing-Allow-Origin:* response header is
added <- Encourage your partners to add this!
O B J E C T L E V E L R U M
!
• What does this give us?
• Unprecedented visibility into
true third-party performance
experienced by real people
D E M O
S E T T I N G A N D E N F O R C I N G S L A S
• Understand what your current SLA is with the third party, if
it exists at all
• Negotiate for descriptive language in the SLA, which
reflects the use of RUM
• Establish a baseline from your users and work with your
provider
• Report often!
S L A E X A M P L E
• Response time measured using resource timing from
Chrome browsers in the United States should not
exceed a median (50th percentile) of 100ms or a 95th
percentile of 500ms for a population of more than 500
users in a 24 hour period
D E M O
F R E E P E R F O R M A N C E A S S E S S M E N T
How much does 1 second of delay impact your revenue?
Give us two weeks to show you:
• What 1 second of delay means to your bottom line
• How fast your customers need you to be
• The top bottlenecks that are slowing you down
AT T R I B U T I O N S
!
https://www.flickr.com/photos/tom-margie/3087915161/in/
photostream/ - Wizard of Oz
http://caniuse.com/resource-timing
Blechhhy (Own work) [GFDL (http://www.gnu.org/copyleft/fdl.html) or
CC-BY-SA-3.0 (http://creativecommons.org/licenses/by-sa/3.0)], via
Wikimedia Commons - Frustrated
!
Thanks
Contact SOASTA:
www.soasta.com/cloudtest/
info@soasta.com
866.344.8766
Follow us:

twitter.com/cloudtest
facebook.com/cloudtest
RESOURCES

Next mPulse Webinar: August 15th
“’Get Started with mPulse for Real User Measurement.”

Register: 
Webinars future and past:
http://www.soasta.com/knowledge-center/webinars/

Want a free mPulse Performance Assessment?
- email info@soasta.com

- You’ll hear from us tomorrow (maybe today)
www.soasta.com
Test Faster. Release Sooner

Mais conteúdo relacionado

Semelhante a Reducing 3rd party content risk with Real User Monitoring

New Era of Software with modern Application Security v1.0
New Era of Software with modern Application Security v1.0New Era of Software with modern Application Security v1.0
New Era of Software with modern Application Security v1.0Dinis Cruz
 
Adversary Emulation and Red Team Exercises - EDUCAUSE
Adversary Emulation and Red Team Exercises - EDUCAUSEAdversary Emulation and Red Team Exercises - EDUCAUSE
Adversary Emulation and Red Team Exercises - EDUCAUSEJorge Orchilles
 
Measuring web performance with user-centric metrics
Measuring web performance with user-centric metricsMeasuring web performance with user-centric metrics
Measuring web performance with user-centric metricsGiorgos Bamparopoulos
 
Velocity NY 2014 - The Natives are Getting Restless
Velocity NY 2014 - The Natives are Getting RestlessVelocity NY 2014 - The Natives are Getting Restless
Velocity NY 2014 - The Natives are Getting RestlessCliff Crocker
 
2014 06-25 velocity sc natives are getting restless
2014 06-25 velocity sc natives are getting restless2014 06-25 velocity sc natives are getting restless
2014 06-25 velocity sc natives are getting restlessBuddy Brewer
 
Synthetic and RUM - Best of bo
Synthetic and RUM - Best of boSynthetic and RUM - Best of bo
Synthetic and RUM - Best of boCliff Crocker
 
What You Need to Know About Web App Security Testing in 2018
What You Need to Know About Web App Security Testing in 2018What You Need to Know About Web App Security Testing in 2018
What You Need to Know About Web App Security Testing in 2018Ken DeSouza
 
Ceh v8 labs module 13 hacking web applications
Ceh v8 labs module 13 hacking web applicationsCeh v8 labs module 13 hacking web applications
Ceh v8 labs module 13 hacking web applicationsMehrdad Jingoism
 
Amp Overview #YGLF 2016
Amp Overview #YGLF 2016Amp Overview #YGLF 2016
Amp Overview #YGLF 2016Ido Green
 
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...Keys To World-Class Retail Web Performance - Expert tips for holiday web read...
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...SOASTA
 
Three Easy Ways to Radically Improve Your Manufacturing Asset Management Process
Three Easy Ways to Radically Improve Your Manufacturing Asset Management ProcessThree Easy Ways to Radically Improve Your Manufacturing Asset Management Process
Three Easy Ways to Radically Improve Your Manufacturing Asset Management ProcessMaintenance Connection
 
When Data Visualizations and Data Imports Just Don’t Work
When Data Visualizations and Data Imports Just Don’t WorkWhen Data Visualizations and Data Imports Just Don’t Work
When Data Visualizations and Data Imports Just Don’t WorkJim Kaplan CIA CFE
 
Remote User Testing - MSU 12 Nov2021
Remote User Testing - MSU 12 Nov2021Remote User Testing - MSU 12 Nov2021
Remote User Testing - MSU 12 Nov2021Chris Farnum
 
Enabling Data-Driven Marketing
Enabling Data-Driven MarketingEnabling Data-Driven Marketing
Enabling Data-Driven MarketingAnnalect Finland
 
Analytics and Big Data in Law Firms
Analytics and Big Data in Law FirmsAnalytics and Big Data in Law Firms
Analytics and Big Data in Law FirmsLexisNexis Pacific
 
Monitoring and Logging in Wonderland
Monitoring and Logging in WonderlandMonitoring and Logging in Wonderland
Monitoring and Logging in WonderlandPaul Seiffert
 
Adversary Emulation and the C2 Matrix
Adversary Emulation and the C2 MatrixAdversary Emulation and the C2 Matrix
Adversary Emulation and the C2 MatrixJorge Orchilles
 
Decoupled APIs through Microservices
Decoupled APIs through MicroservicesDecoupled APIs through Microservices
Decoupled APIs through MicroservicesDavid Simons
 

Semelhante a Reducing 3rd party content risk with Real User Monitoring (20)

New Era of Software with modern Application Security v1.0
New Era of Software with modern Application Security v1.0New Era of Software with modern Application Security v1.0
New Era of Software with modern Application Security v1.0
 
diadem-vldb-2015
diadem-vldb-2015diadem-vldb-2015
diadem-vldb-2015
 
Adversary Emulation and Red Team Exercises - EDUCAUSE
Adversary Emulation and Red Team Exercises - EDUCAUSEAdversary Emulation and Red Team Exercises - EDUCAUSE
Adversary Emulation and Red Team Exercises - EDUCAUSE
 
Measuring web performance with user-centric metrics
Measuring web performance with user-centric metricsMeasuring web performance with user-centric metrics
Measuring web performance with user-centric metrics
 
Velocity NY 2014 - The Natives are Getting Restless
Velocity NY 2014 - The Natives are Getting RestlessVelocity NY 2014 - The Natives are Getting Restless
Velocity NY 2014 - The Natives are Getting Restless
 
2014 06-25 velocity sc natives are getting restless
2014 06-25 velocity sc natives are getting restless2014 06-25 velocity sc natives are getting restless
2014 06-25 velocity sc natives are getting restless
 
Synthetic and RUM - Best of bo
Synthetic and RUM - Best of boSynthetic and RUM - Best of bo
Synthetic and RUM - Best of bo
 
What You Need to Know About Web App Security Testing in 2018
What You Need to Know About Web App Security Testing in 2018What You Need to Know About Web App Security Testing in 2018
What You Need to Know About Web App Security Testing in 2018
 
Ceh v8 labs module 13 hacking web applications
Ceh v8 labs module 13 hacking web applicationsCeh v8 labs module 13 hacking web applications
Ceh v8 labs module 13 hacking web applications
 
Amp Overview #YGLF 2016
Amp Overview #YGLF 2016Amp Overview #YGLF 2016
Amp Overview #YGLF 2016
 
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...Keys To World-Class Retail Web Performance - Expert tips for holiday web read...
Keys To World-Class Retail Web Performance - Expert tips for holiday web read...
 
Three Easy Ways to Radically Improve Your Manufacturing Asset Management Process
Three Easy Ways to Radically Improve Your Manufacturing Asset Management ProcessThree Easy Ways to Radically Improve Your Manufacturing Asset Management Process
Three Easy Ways to Radically Improve Your Manufacturing Asset Management Process
 
When Data Visualizations and Data Imports Just Don’t Work
When Data Visualizations and Data Imports Just Don’t WorkWhen Data Visualizations and Data Imports Just Don’t Work
When Data Visualizations and Data Imports Just Don’t Work
 
Remote User Testing - MSU 12 Nov2021
Remote User Testing - MSU 12 Nov2021Remote User Testing - MSU 12 Nov2021
Remote User Testing - MSU 12 Nov2021
 
Company and Product Profile - Talentnow RecruitX
Company and Product Profile - Talentnow RecruitXCompany and Product Profile - Talentnow RecruitX
Company and Product Profile - Talentnow RecruitX
 
Enabling Data-Driven Marketing
Enabling Data-Driven MarketingEnabling Data-Driven Marketing
Enabling Data-Driven Marketing
 
Analytics and Big Data in Law Firms
Analytics and Big Data in Law FirmsAnalytics and Big Data in Law Firms
Analytics and Big Data in Law Firms
 
Monitoring and Logging in Wonderland
Monitoring and Logging in WonderlandMonitoring and Logging in Wonderland
Monitoring and Logging in Wonderland
 
Adversary Emulation and the C2 Matrix
Adversary Emulation and the C2 MatrixAdversary Emulation and the C2 Matrix
Adversary Emulation and the C2 Matrix
 
Decoupled APIs through Microservices
Decoupled APIs through MicroservicesDecoupled APIs through Microservices
Decoupled APIs through Microservices
 

Mais de SOASTA

Mobile Performance: State of the Union
Mobile Performance: State of the UnionMobile Performance: State of the Union
Mobile Performance: State of the UnionSOASTA
 
Techniques, Tips & Tools For Mobile App Testing
Techniques, Tips & Tools For Mobile App TestingTechniques, Tips & Tools For Mobile App Testing
Techniques, Tips & Tools For Mobile App TestingSOASTA
 
Velocity 2015 building self healing systems (slide share version)
Velocity 2015 building self healing systems (slide share version)Velocity 2015 building self healing systems (slide share version)
Velocity 2015 building self healing systems (slide share version)SOASTA
 
Metrics, Metrics Everywhere (but where the heck do you start?)
Metrics, Metrics Everywhere (but where the heck do you start?)Metrics, Metrics Everywhere (but where the heck do you start?)
Metrics, Metrics Everywhere (but where the heck do you start?)SOASTA
 
3 tips to increase mobile test coverage
3 tips to increase mobile test coverage3 tips to increase mobile test coverage
3 tips to increase mobile test coverageSOASTA
 
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & Mobile
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & MobileWebinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & Mobile
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & MobileSOASTA
 
Get Ready for Changes To Load Testing
Get Ready for Changes To Load Testing Get Ready for Changes To Load Testing
Get Ready for Changes To Load Testing SOASTA
 
Building a Performance A-Team
Building a Performance A-TeamBuilding a Performance A-Team
Building a Performance A-TeamSOASTA
 
Dach webinar - Image Absicherung – Lektionen aus dem Facebook Crash
Dach webinar - Image Absicherung – Lektionen aus dem Facebook CrashDach webinar - Image Absicherung – Lektionen aus dem Facebook Crash
Dach webinar - Image Absicherung – Lektionen aus dem Facebook CrashSOASTA
 
Four best practices for performance testing mobile apps soasta and utopia
Four best practices for performance testing mobile apps   soasta and utopiaFour best practices for performance testing mobile apps   soasta and utopia
Four best practices for performance testing mobile apps soasta and utopiaSOASTA
 
7 steps to pragmatic mobile testing
7 steps to pragmatic mobile testing7 steps to pragmatic mobile testing
7 steps to pragmatic mobile testingSOASTA
 
Secrets to Realistic Load Testing
Secrets to Realistic Load TestingSecrets to Realistic Load Testing
Secrets to Realistic Load TestingSOASTA
 
How to measure the business impact of web performance
How to measure the business impact of web performanceHow to measure the business impact of web performance
How to measure the business impact of web performanceSOASTA
 
Lasttest auf Zuruf CloudTest on Demand webinar presentation
Lasttest auf Zuruf CloudTest on Demand webinar presentationLasttest auf Zuruf CloudTest on Demand webinar presentation
Lasttest auf Zuruf CloudTest on Demand webinar presentationSOASTA
 
Accelerate Web and Mobile Testing for Continuous Integration and Delivery
Accelerate Web and Mobile Testing for Continuous Integration and DeliveryAccelerate Web and Mobile Testing for Continuous Integration and Delivery
Accelerate Web and Mobile Testing for Continuous Integration and DeliverySOASTA
 
The Mobile Testing Checklist
The Mobile Testing ChecklistThe Mobile Testing Checklist
The Mobile Testing ChecklistSOASTA
 
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...SOASTA
 
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal Readiness
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal ReadinessTis The Season: Load Testing Tips and Checklist for Retail Seasonal Readiness
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal ReadinessSOASTA
 
Modern Load Testing: Move Your Load Testing from the Past to the Present
Modern Load Testing: Move Your Load Testing from the Past to the PresentModern Load Testing: Move Your Load Testing from the Past to the Present
Modern Load Testing: Move Your Load Testing from the Past to the PresentSOASTA
 
Getting started w ct lite load_testing 21.05.14
Getting started w ct lite load_testing 21.05.14Getting started w ct lite load_testing 21.05.14
Getting started w ct lite load_testing 21.05.14SOASTA
 

Mais de SOASTA (20)

Mobile Performance: State of the Union
Mobile Performance: State of the UnionMobile Performance: State of the Union
Mobile Performance: State of the Union
 
Techniques, Tips & Tools For Mobile App Testing
Techniques, Tips & Tools For Mobile App TestingTechniques, Tips & Tools For Mobile App Testing
Techniques, Tips & Tools For Mobile App Testing
 
Velocity 2015 building self healing systems (slide share version)
Velocity 2015 building self healing systems (slide share version)Velocity 2015 building self healing systems (slide share version)
Velocity 2015 building self healing systems (slide share version)
 
Metrics, Metrics Everywhere (but where the heck do you start?)
Metrics, Metrics Everywhere (but where the heck do you start?)Metrics, Metrics Everywhere (but where the heck do you start?)
Metrics, Metrics Everywhere (but where the heck do you start?)
 
3 tips to increase mobile test coverage
3 tips to increase mobile test coverage3 tips to increase mobile test coverage
3 tips to increase mobile test coverage
 
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & Mobile
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & MobileWebinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & Mobile
Webinar: Was die Top eCommerce Firmen über Ihre Performance auf Web- & Mobile
 
Get Ready for Changes To Load Testing
Get Ready for Changes To Load Testing Get Ready for Changes To Load Testing
Get Ready for Changes To Load Testing
 
Building a Performance A-Team
Building a Performance A-TeamBuilding a Performance A-Team
Building a Performance A-Team
 
Dach webinar - Image Absicherung – Lektionen aus dem Facebook Crash
Dach webinar - Image Absicherung – Lektionen aus dem Facebook CrashDach webinar - Image Absicherung – Lektionen aus dem Facebook Crash
Dach webinar - Image Absicherung – Lektionen aus dem Facebook Crash
 
Four best practices for performance testing mobile apps soasta and utopia
Four best practices for performance testing mobile apps   soasta and utopiaFour best practices for performance testing mobile apps   soasta and utopia
Four best practices for performance testing mobile apps soasta and utopia
 
7 steps to pragmatic mobile testing
7 steps to pragmatic mobile testing7 steps to pragmatic mobile testing
7 steps to pragmatic mobile testing
 
Secrets to Realistic Load Testing
Secrets to Realistic Load TestingSecrets to Realistic Load Testing
Secrets to Realistic Load Testing
 
How to measure the business impact of web performance
How to measure the business impact of web performanceHow to measure the business impact of web performance
How to measure the business impact of web performance
 
Lasttest auf Zuruf CloudTest on Demand webinar presentation
Lasttest auf Zuruf CloudTest on Demand webinar presentationLasttest auf Zuruf CloudTest on Demand webinar presentation
Lasttest auf Zuruf CloudTest on Demand webinar presentation
 
Accelerate Web and Mobile Testing for Continuous Integration and Delivery
Accelerate Web and Mobile Testing for Continuous Integration and DeliveryAccelerate Web and Mobile Testing for Continuous Integration and Delivery
Accelerate Web and Mobile Testing for Continuous Integration and Delivery
 
The Mobile Testing Checklist
The Mobile Testing ChecklistThe Mobile Testing Checklist
The Mobile Testing Checklist
 
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...
How To Use Jenkins for Continuous Load and Mobile Testing with SOASTA & Cloud...
 
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal Readiness
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal ReadinessTis The Season: Load Testing Tips and Checklist for Retail Seasonal Readiness
Tis The Season: Load Testing Tips and Checklist for Retail Seasonal Readiness
 
Modern Load Testing: Move Your Load Testing from the Past to the Present
Modern Load Testing: Move Your Load Testing from the Past to the PresentModern Load Testing: Move Your Load Testing from the Past to the Present
Modern Load Testing: Move Your Load Testing from the Past to the Present
 
Getting started w ct lite load_testing 21.05.14
Getting started w ct lite load_testing 21.05.14Getting started w ct lite load_testing 21.05.14
Getting started w ct lite load_testing 21.05.14
 

Último

JET Technology Labs White Paper for Virtualized Security and Encryption Techn...
JET Technology Labs White Paper for Virtualized Security and Encryption Techn...JET Technology Labs White Paper for Virtualized Security and Encryption Techn...
JET Technology Labs White Paper for Virtualized Security and Encryption Techn...amber724300
 
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Farhan Tariq
 
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfGenerative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfIngrid Airi González
 
Long journey of Ruby standard library at RubyConf AU 2024
Long journey of Ruby standard library at RubyConf AU 2024Long journey of Ruby standard library at RubyConf AU 2024
Long journey of Ruby standard library at RubyConf AU 2024Hiroshi SHIBATA
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfNeo4j
 
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)Mark Simos
 
Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessWSO2
 
Infrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsInfrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsYoss Cohen
 
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sectoritnewsafrica
 
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...Alkin Tezuysal
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch TuesdayIvanti
 
A Framework for Development in the AI Age
A Framework for Development in the AI AgeA Framework for Development in the AI Age
A Framework for Development in the AI AgeCprime
 
All These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFAll These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFMichael Gough
 
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesHow to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesThousandEyes
 
Kuma Meshes Part I - The basics - A tutorial
Kuma Meshes Part I - The basics - A tutorialKuma Meshes Part I - The basics - A tutorial
Kuma Meshes Part I - The basics - A tutorialJoão Esperancinha
 
Microservices, Docker deploy and Microservices source code in C#
Microservices, Docker deploy and Microservices source code in C#Microservices, Docker deploy and Microservices source code in C#
Microservices, Docker deploy and Microservices source code in C#Karmanjay Verma
 
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...Karmanjay Verma
 
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...panagenda
 
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...BookNet Canada
 
So einfach geht modernes Roaming fuer Notes und Nomad.pdf
So einfach geht modernes Roaming fuer Notes und Nomad.pdfSo einfach geht modernes Roaming fuer Notes und Nomad.pdf
So einfach geht modernes Roaming fuer Notes und Nomad.pdfpanagenda
 

Último (20)

JET Technology Labs White Paper for Virtualized Security and Encryption Techn...
JET Technology Labs White Paper for Virtualized Security and Encryption Techn...JET Technology Labs White Paper for Virtualized Security and Encryption Techn...
JET Technology Labs White Paper for Virtualized Security and Encryption Techn...
 
Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...Genislab builds better products and faster go-to-market with Lean project man...
Genislab builds better products and faster go-to-market with Lean project man...
 
Generative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdfGenerative Artificial Intelligence: How generative AI works.pdf
Generative Artificial Intelligence: How generative AI works.pdf
 
Long journey of Ruby standard library at RubyConf AU 2024
Long journey of Ruby standard library at RubyConf AU 2024Long journey of Ruby standard library at RubyConf AU 2024
Long journey of Ruby standard library at RubyConf AU 2024
 
Connecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdfConnecting the Dots for Information Discovery.pdf
Connecting the Dots for Information Discovery.pdf
 
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)
Tampa BSides - The No BS SOC (slides from April 6, 2024 talk)
 
Accelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with PlatformlessAccelerating Enterprise Software Engineering with Platformless
Accelerating Enterprise Software Engineering with Platformless
 
Infrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platformsInfrared simulation and processing on Nvidia platforms
Infrared simulation and processing on Nvidia platforms
 
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector
4. Cobus Valentine- Cybersecurity Threats and Solutions for the Public Sector
 
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
Unleashing Real-time Insights with ClickHouse_ Navigating the Landscape in 20...
 
2024 April Patch Tuesday
2024 April Patch Tuesday2024 April Patch Tuesday
2024 April Patch Tuesday
 
A Framework for Development in the AI Age
A Framework for Development in the AI AgeA Framework for Development in the AI Age
A Framework for Development in the AI Age
 
All These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDFAll These Sophisticated Attacks, Can We Really Detect Them - PDF
All These Sophisticated Attacks, Can We Really Detect Them - PDF
 
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyesHow to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
How to Effectively Monitor SD-WAN and SASE Environments with ThousandEyes
 
Kuma Meshes Part I - The basics - A tutorial
Kuma Meshes Part I - The basics - A tutorialKuma Meshes Part I - The basics - A tutorial
Kuma Meshes Part I - The basics - A tutorial
 
Microservices, Docker deploy and Microservices source code in C#
Microservices, Docker deploy and Microservices source code in C#Microservices, Docker deploy and Microservices source code in C#
Microservices, Docker deploy and Microservices source code in C#
 
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...React JS; all concepts. Contains React Features, JSX, functional & Class comp...
React JS; all concepts. Contains React Features, JSX, functional & Class comp...
 
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
Why device, WIFI, and ISP insights are crucial to supporting remote Microsoft...
 
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
Transcript: New from BookNet Canada for 2024: BNC SalesData and LibraryData -...
 
So einfach geht modernes Roaming fuer Notes und Nomad.pdf
So einfach geht modernes Roaming fuer Notes und Nomad.pdfSo einfach geht modernes Roaming fuer Notes und Nomad.pdf
So einfach geht modernes Roaming fuer Notes und Nomad.pdf
 

Reducing 3rd party content risk with Real User Monitoring

  • 1. How Real User Monitoring Reduces 3rd Party Content Risk Webinar
  • 2. Cliff Crocker VP Product - mPulse Real User Measurement
  • 3. T O D AY W E W I L L C O V E R … • The impact of third-party resources on your site • How to measure third-parties effectively • Defining SLAs • Reporting on third-party performance
  • 4. – S T E V E S O U D E R S ’ W E B P E R F O R M A N C E G O L D E N R U L E “80% of time is spent on the front-end.”
  • 5. W H AT Y O U S E E • <JavaScript>, stylesheets • Images & other media • Display ads • Product reviews and recommendations • Personalization and placement • Social media widgets
  • 6. Pay no attention to the man behind the curtain! W H AT Y O U D O N ’ T S E E • Web analytics & marketing • Tracking & targeting • User experience measurement (CEM & RUM) • Tag management
  • 7. • Top 25 retail sites from Alexa • Examined Home page for each site using WebPagetest.org • Focused on the number of third-party domains 3 R D PA R T Y S T U D Y
  • 8. 3 R D PA R T Y S T U D Y
  • 9. • Primary Domain: Within the control of the site owner such as origin, image domains (CDN included) • 3rd Party Domain: Hosted by a provider outside of the control of the site owner 3 R D PA R T Y S T U D Y
  • 10. Domains Alexa Ranking 31 10 35 23 86 41 20 37 303131 4 48 38 42 16 11 6 28 68 31 36 4 198 212513351122532432351 7 3 7 17 Primary domains 3rd Party domains 3 R D PA R T Y S T U D Y - U N I Q U E D O M A I N S P E R PA G E Domains: Median - 32 Min - 25 Max - 87
  • 11. 3 R D PA R T Y S T U D Y Compared to the HTTPArchive (All Sites) - average number of domains is 17!!
  • 12. 91% 9% 91% of domains are 3rd parties 3 R D PA R T Y S T U D Y
  • 13. Front-end single point of failure occurs when a document loads, but is blocked by a resource that fails (in this case third-party) causing the entire site to stop loading (simulation)
  • 14. F R O N T- E N D S I N G L E P O I N T O F FA I L U R E
  • 15. 1 5 O F 2 5 L A R G E S T O N L I N E R E TA I L E R S H AV E A F R O N T- E N D S I N G L E P O I N T O F FA I L U R E 40% 12% 48% Critical Non-Critical None 60% have a 3rd party front-end SPOF
  • 16. T E S T I N G Y O U R S E L F F O R 3 R D PA R T Y F R O N T- E N D S P O F • SPOF-O-MATIC & WebPagetest D E M O
  • 17. O B J E C T L E V E L R U M • Advances in browser technology make it possible to collect performance at the object level from end users • “Resource Timing” - supported in mainstream browsers such as Chrome, IE, Android, Opera
  • 18. R E S O U R C E T I M I N G For each request, it is possible to capture timing below http://www.w3.org/TR/resource-timing/
  • 19. R E S O U R C E T I M I N G • With one exception: Cross-origin requests (such as third-party content) • Request Start and End only by default • Unless: Timing-Allow-Origin:* response header is added <- Encourage your partners to add this!
  • 20. O B J E C T L E V E L R U M ! • What does this give us? • Unprecedented visibility into true third-party performance experienced by real people D E M O
  • 21. S E T T I N G A N D E N F O R C I N G S L A S • Understand what your current SLA is with the third party, if it exists at all • Negotiate for descriptive language in the SLA, which reflects the use of RUM • Establish a baseline from your users and work with your provider • Report often!
  • 22. S L A E X A M P L E • Response time measured using resource timing from Chrome browsers in the United States should not exceed a median (50th percentile) of 100ms or a 95th percentile of 500ms for a population of more than 500 users in a 24 hour period D E M O
  • 23. F R E E P E R F O R M A N C E A S S E S S M E N T How much does 1 second of delay impact your revenue? Give us two weeks to show you: • What 1 second of delay means to your bottom line • How fast your customers need you to be • The top bottlenecks that are slowing you down
  • 24. AT T R I B U T I O N S ! https://www.flickr.com/photos/tom-margie/3087915161/in/ photostream/ - Wizard of Oz http://caniuse.com/resource-timing Blechhhy (Own work) [GFDL (http://www.gnu.org/copyleft/fdl.html) or CC-BY-SA-3.0 (http://creativecommons.org/licenses/by-sa/3.0)], via Wikimedia Commons - Frustrated !
  • 25. Thanks Contact SOASTA: www.soasta.com/cloudtest/ info@soasta.com 866.344.8766 Follow us: twitter.com/cloudtest facebook.com/cloudtest RESOURCES Next mPulse Webinar: August 15th “’Get Started with mPulse for Real User Measurement.” Register: Webinars future and past: http://www.soasta.com/knowledge-center/webinars/ Want a free mPulse Performance Assessment? - email info@soasta.com - You’ll hear from us tomorrow (maybe today)