Systems and methods for detecting security risks in network pages

A system for detecting security risks in network pages, the system comprising:

• a data storage device storing instructions for detecting security risks in secure transaction pages;
• and
• a processor configured to execute the instructions to perform a method comprising:
• providing at least one secure transaction page to a secure transaction provider, the secure transaction page enabling the secure transaction provider to request secure transactions;
• determining an expected request rate for the secure transaction page by the secure transaction provider based on a history of request rate for the secure transaction page;
• determining an actual request rate for the secure transaction page by the secure transaction provider, the actual request rate being indicative of a number of calls for the secure transaction page over a predetermined time period;
• determining a first predetermined threshold for a change in request rate for the secure transaction page by the secure transaction provider, the change in request rate representing a difference between the expected request rate and the actual request rate;
• determining that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded, with the actual request rate being lower than the expected request rate by an amount exceeding the first predetermined threshold;
• in response to determining that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded, declining at least one of a new token request or a card-not-present (CNP) token request from the secure transaction provider;
• providing a notification to the secure transaction provider based on the determination that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded;
• receiving secure transaction data from the secure transaction provider;
• and
• determining a second predetermined threshold, the second predetermined threshold being lower than the first predetermined threshold, for a change in request rate for the secure transaction page by the secure transaction provider, based on the secure transaction data from the secure transaction provider.

A non-transitory computer-readable medium storing instructions that, when executed by a transaction processor, cause the transaction processor to perform a method for detecting security risks in network pages, the method comprising:

• providing at least one secure transaction page to a secure transaction provider, the secure transaction page enabling the secure transaction provider to request secure transactions;
• determining an expected request rate for the secure transaction page by the secure transaction provider based on a history of request rate for the secure transaction page;
• determining an actual request rate for the secure transaction page by the secure transaction provider, the actual request rate being indicative of a number of calls for the secure transaction page over a predetermined time period;
• determining a first predetermined threshold for a change in request rate for the secure transaction page by the secure transaction provider, the change in request rate representing a difference between the expected request rate and the actual request rate;
• determining that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded, with the actual request rate being lower than the expected request rate by an amount exceeding the first predetermined threshold;
• in response to determining that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded, declining at least one of a new token request or a card-not-present (CNP) token request from the secure transaction provider;
• providing a notification to the secure transaction provider based on the determination that the first predetermined threshold, for the change in request rate for the secure transaction page by the secure transaction provider, has been exceeded;
• receiving secure transaction data from the secure transaction provider;
• and
• determining a second predetermined threshold, the second predetermined threshold being lower than the first predetermined threshold, for a change in request rate for the secure transaction page by the secure transaction provider, based on the secure transaction data from the secure transaction provider.