DEVICE, SYSTEM, AND METHOD OF DETECTING MALICIOUS AUTOMATIC SCRIPT AND CODE INJECTION

摘要

Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. The methods include monitoring of user-side input-unit interactions, in general and in response to an interference introduced to user-interface elements. The monitored interactions are used for detecting an attacker that utilizes a remote access channel; for detecting a malicious automatic script, as well as malicious code injection; to identify a particular hardware assembly; to perform user segmentation or user characterization; to enable a visual login process with implicit two-factor authentication; to enable stochastic cryptography; and to detect that multiple users are utilizing the same subscription account.

主权项

1. A method comprising:
determining whether a user, who utilizes a computing device to interact with a computerized service, (i) is a human user, or (ii) is an automatic script executed by a processor; wherein the determining comprises: (a) monitoring user-side input-unit interactions performed through one or more input units; (b) matching between (A) the user-side input-unit interactions and (B) data sent electronically from said computerized service; (c) if the comparing result is that (A) the user-side input-unit interactions do not exactly match (B) the data sent electronically from said computerized service, then determining that the computing device is operated by automatic script executed by said processor.