Providing application security using causal graph

A system, comprising:

• memory;
• one or more processors;
• and
• one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or more programs including instructions for:
• receiving, from a first remote device, a first request to access a first location of a web site;
• transmitting, to a server that corresponds to the web site, the first request to access the first location;
• receiving, from the server, a first cookie that includes identifying information for the first location;
• in response to receiving the first cookie, storing the identifying information for the first location;
• receiving, from the first remote device, a second request to access a second location of the website, wherein:
• the second location is distinct from the first location, and
• the second request includes the identifying information for the first location;
• transmitting, to the server, the second request to access the second location;
• receiving, from the server, a second cookie that includes the identifying information for the first location and identifying information for the second location;
• in response to receiving the second cookie, storing a first path profile that includes the identifying information for the first location and the identifying information for the second location, and storing second time information, wherein the first cookie includes first time information and the second cookie includes the second time information.

A non-transitory computer readable storage medium storing one or more programs, the one or more programs comprising instructions, which when executed by an electronic device, cause the device to:

• receive, from a first remote device, a first request to access a first location of a website;
• transmit, to a server that corresponds to the website, the first request to access the first location;
• receive, from the server, a first cookie that includes identifying information for the first location;
• in response to receiving the first cookie, store the identifying information for the first location;
• receive, from the first remote device, a second request to access a second location of the website, wherein:
• the second location is distinct from the first location, and
• the second request includes the identifying information for the first location;
• transmit, to the server, the second request to access the second location;
• receive, from the server, a second cookie that includes the identifying information for the first location and identifying information for the second location;
• in response to receiving the second cookie, store a first path profile that includes the identifying information for the first location and the identifying information for the second location;
• wherein storing the identifying information for the first location and the second location includes storing a hash of the second cookie.