Methods and systems for browser spoofing mitigation

An authentication system comprising:

• an authentication module and
• a reference database storing reference order information,
• wherein the reference order information includes, for each web browser type among a plurality of web browser types, at least one of:
• an indication of an order of hypertext transfer protocol (HTTP) headers included in an HTTP request of the web browser type and
• an indication of an order of navigator object properties of the web browser type,
• wherein the authentication module is configured to:
• receive, from a web browser of a first entity attempting to log in to a web property, first credentials of a first user,
• perform a first determination operation including determining whether the first credentials are correct, and determine order information of the web browser of the first entity, and
• wherein the authentication module is further configured to, based on a result of the first determination operation
• perform a comparison operation based on the reference order information and the order information of the first entity,
• request one or more authentication factors from the first entity, different from the first credentials of the first user, based on the result of the comparison operation, and
• determine whether or not to allow the first entity to log in to the web property based on the one or more authentication factors and a result of the comparison operation.

A method of operating an authentication system, the authentication system including an authentication module and a user history database storing order information of a first user, the method comprising:

• receiving, from a web browser of a first entity attempting to log in to a web property, credentials of the first user;
• determining order information of the web browser of the first entity;
• performing a comparison operation based on the order information of the first user and the order information of the first entity;
• and
• determining whether or not to allow the first entity to log in to the web property based on a result of the comparison operation,
• wherein the order information of the first user includes, for each login, among a plurality of times the first user logged in to the web property associated with the authentication system, at least one of:
• an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received at the authentication module from a web browser of the first user during the login and
• an indication of an order of navigator object properties that were previously returned to the authentication module by a web browser of the first user during the login and
• wherein the order information of the first user includes order information corresponding to
• at least two different web browsers of two different versions of a web browser family, respectively, or
• at least two different web browsers of two different web browser families, respectively.

A method of operating an authentication system, the authentication system including an authentication module and a reference database storing reference order information, the method comprising:

• receiving, from a web browser of a first entity attempting to log in to a web property, first credentials of a first user;
• performing a first determination operation including determining whether the first credentials are correct;
• determining order information of the web browser of the first entity;
• and
• based on a result of the first determination operation
• performing a comparison operation based on the reference order information and the order information of the first entity,
• requesting one or more authentication factors from the first entity, different from the first credentials of the first user, based on the result of the comparison operation, and
• determining whether or not to allow the first entity to log in to the web property based on the one or more authentication factors and a result of the comparison operation,
• wherein the reference order information includes, for each web browser type among a plurality of web browser types, at least one of:
• an indication of an order of hypertext transfer protocol (HTTP) headers included in an HTTP request of the web browser type and
• an indication of an order of navigator object properties of the web browser type.