Method and system for preventing malicious automated attacks

Abstract

The invention relates to the field of information security and can be used to filter requests to a computer system. The technical result is to ensure the safety of the protected resource from suspicious automated activity, malicious automated attacks; reducing the load on the computing power (processor) of both the user and the protected resource; reduced time to prevent malicious automated attacks. In the method for preventing malicious automated attacks, the user is evaluated based on the received request to the computer system about the session by means of technical analysis, during which the collection of request metrics is carried out, and the legitimacy of the request is evaluated by means of the prepared statistical model. In the method, an additional verification is carried out for a suspicious user to clarify his legitimacy using the JavaScript Challenge component; in the process of the verification, additional metrics of the suspicious user's browser are collected. If the user classified as suspicious, his access to the resource is blocked. The system comprises a server with a service/services for processing user requests, a module for assessing the legitimacy of the request from the user and an additional verification module.

Dependencies are inferred from the claim text.