Apparatus and method for post-authentication user verification based on user interactions

An apparatus comprising:

• at least one memory configured to store:
• first data identifying first user interactions with one or more computing or networking resources during at least one first user session that is known to be valid;
• and
• second data identifying second user interactions with at least one of the one or more computing or networking resources during a subsequent second user session;
• and
• at least one processing device configured to:
• generate one or more profiles defining typical user interactions with the one or more computing or networking resources based on the first data;
• determine whether the second user session is valid based on the second data and at least one of the one or more profiles by comparing the second user interactions to the typical user interactions defined in the at least one profile;
• and
• initiate one or more actions in response to determining that the second user session is not valid.

A non-transitory computer readable medium containing instructions that when executed cause at least one processor to:

• obtain first data identifying first user interactions with one or more computing or networking resources during at least one first user session that is known to be valid;
• generate one or more profiles defining typical user interactions with the one or more computing or networking resources based on the first data;
• obtain second data identifying second user interactions with at least one of the one or more computing or networking resources during a subsequent second user session;
• determine whether the second user session is valid based on the second data and at least one of the one or more profiles by comparing the second user interactions to the typical user interactions defined in the at least one profile;
• and
• initiate one or more actions in response to determining that the second user session is not valid.