Methods and systems for browser spoofing mitigation

An authentication system comprising:

• at least one memory, wherein the memory stores instructions and a reference database storing reference order information, the reference order information including, for each web browser type among a plurality of web browser types, at least one of an indication of an order of hypertext transfer protocol (HTTP) headers included in an HTTP request of the web browser type or an indication of an order of navigator object properties of the web browser type;
• and
• at least one processor configured to execute the instructions and cause the authentication system to perform,
• receiving, from a web browser of a first entity attempting to log in to a web property, first credentials of a first user,
• determining order information of the web browser of the first entity, the order information of the web browser including at least one of an indication of an order of HTTP headers included in an HTTP request of the web browser of the first entity or an indication of an order of navigator object properties of the web browser of the first entity,
• requesting one or more authentication factors from the first entity, different from the first credentials of the first user, based on the reference order information, the order information of the web browser of the first entity, and the first credentials of the first user, and
• determining whether to allow the first entity to log in to the web property based on the one or more authentication factors, the order information of the web browser of the first entity, and the reference order information.

A method of operating an authentication system, the authentication system including at least one memory configured to store order information of a first user, the order information of the first user including, for each login, among a plurality of times the first user logged in to a web property associated with the authentication system, at least one of an indication of an order of hypertext transfer protocol (HTTP) headers that were previously received from a web browser of the first user during the login or an indication of an order of navigator object properties that were previously returned by a web browser of the first user during the login, the method comprising:

• receiving, from a web browser of a first entity attempting to log in to a web property, credentials of the first user;
• determining order information of the web browser of the first entity, the order information of the web browser of the first entity including at least one of an indication of an order of HTTP headers included in an HTTP request of the web browser of the first entity or an indication of an order of navigator object properties of the web browser of the first entity;
• and
• determining whether to allow the first entity to log in to the web property based on a comparison of the order information of the first user and the order information of the first entity.

A method of operating an authentication system, the authentication system including at least one memory configured to store a reference database including reference order information, the reference order information including, for each web browser type among a plurality of web browser types, at least one of an indication of an order of hypertext transfer protocol (HTTP) headers included in an HTTP request of the web browser type or an indication of an order of navigator object properties of the web browser type, the method comprising:

• receiving, from a web browser of a first entity attempting to log in to a web property, first credentials of a first user;
• determining order information of the web browser of the first entity, the order information of the web browser including at least one of an indication of an order of HTTP headers included in an HTTP request of the web browser of the first entity or an indication of an order of navigator object properties of the web browser of the first entity;
• requesting one or more authentication factors from the first entity, different from the first credentials of the first user, based on the reference order information, the order information of the web browser of the first entity, and the first credentials of the first user;
• and
• determining whether to allow the first entity to log in to the web property based on the one or more authentication factors, the reference order information, and the order information of the web browser of the first entity.