Frictionless supplementary multi-factor authentication for sensitive transactions within an application session

A system for applying a security policy by an application security system to a transaction within an application that is monitored by the application security system, the system comprising:

• at least one processor;
• and
• at least one non-transitory computer-readable medium having stored therein instructions which, when executed by the at least one processor, cause the at least one processor to perform operations comprising:
• monitoring transactions occurring between a client device and the application over a network, wherein the application comprises a default level of service;
• identifying a first transaction from the transactions as a sensitive transaction, wherein the sensitive transaction is associated with an authentication policy requiring an authentication in accordance with an alternate level of service that modifies the default level of service, wherein the identifying the first transaction from the transactions as the sensitive transaction includes:
• configuring the application security system to classify transactions having a transaction name matching a filter or specific string as sensitive, wherein the transaction name corresponds to an application-level identifier of the transaction;
• and
• matching the first transaction by its name to the filter or specific string;
• interrupting execution of the first transaction at runtime by the application security system prior to completion of the first transaction;
• and
• modifying a packet of the first transaction to cause the alternate level of service in response to the identifying the first transaction as the sensitive transaction, wherein the alternate level of service prompts the client device for the authentication.

A non-transitory computer-readable medium having stored therein instructions for applying a security policy by an application security system to a transaction within an application that is monitored by the application security system which, when executed by a processor, cause the processor to perform operations comprising:

• monitoring transactions occurring between a client device and the application over a network, wherein the application comprises a default level of service;
• identifying a first transaction from the transactions as a sensitive transaction, wherein the sensitive transaction is associated with an authentication policy requiring an authentication in accordance with an alternate level of service that modifies the default level of service, wherein the identifying the first transaction from the transactions as the sensitive transaction includes:
• configuring the application security system to classify transactions having a transaction name matching a filter or specific string as sensitive, wherein the transaction name corresponds to an application-level identifier of the transaction;
• and
• matching the first transaction by its name to the filter or specific string;
• interrupting execution of the first transaction at runtime by the application security system prior to completion of the first transaction;
• and
• modifying a packet of the first transaction to cause the alternate level of service in response to the identifying the first transaction as the sensitive transaction, wherein the alternate level of service prompts the client device for the authentication.