Thwarting an impersonation attack using online decoy text

One or more non-transitory computer-readable media comprising one or more computer-readable instructions that, when executed by one or more processors of a computer device, cause the computer device to perform a method for thwarting an impersonation attack using online decoy text, the method comprising:

• intercepting first actual text submitted online by a first user;
• generating decoy text to replace the first actual text;
• sending the decoy text for posting online;
• training a machine learning model using the decoy text to make the machine learning model capable of recognizing a decoy language pattern in the decoy text;
• intercepting second actual text submitted to a web server by a second user purporting to be the first user;
• determining, using the machine learning model, that a language pattern in the second actual text matches the decoy language pattern in the decoy text;
• in response to determining that the language pattern in the second actual text matches the decoy language pattern in the decoy text:
• determining that the second user is impersonating the first user in an impersonation attack;
• and
• thwarting the impersonation attack by performing a remedial action at the web server to protect the web server from the impersonation attack.

A server comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media comprising one or more computer-readable instructions that, when executed by the one or more processors, cause the server to perform a method comprising:
• receiving decoy text, the decoy text having been generated to replace first actual text that was intercepted after having been submitted online by a first user, the decoy text further having been sent for posting online;
• training a machine learning model using the decoy text to make the machine learning model capable of recognizing a decoy language pattern in the decoy text;
• receiving second actual text, the second actual text having been intercepted after having been submitted to a web server by a second user purporting to be the first user;
• determining, using the machine learning model, that a language pattern in the second actual text matches the decoy language pattern in the decoy text;
• in response to determining that the language pattern in the second actual text matches the decoy language pattern in the decoy text:
• determining that the second user is impersonating the first user in an impersonation attack;
• and
• thwarting the impersonation attack by performing a remedial action at the web server to protect the web server from the impersonation attack.