Dynamic data signal collection to prevent telemetry spoofing in a bot detection system

An apparatus, comprising:

• one or more hardware processors;
• and
• computer memory holding computer program instructions executed by the one or more hardware processors, the computer program instructions having program code configured to:
• during a workflow in which a client device is seeking access to a protected endpoint, receive a request to fetch a data collection script, the request including a first set of signals associated with the client device;
• in response to the request, and based at least in part on a temporal function, generate a custom data collection script for the workflow, the custom data collection script including a second set of signals;
• return the custom data collection script;
• receive telemetry from the client device, the telemetry including data having been collected at the client device based on runtime execution of the custom data collection script;
• and
• based at least in part on the telemetry, enable access to a protected endpoint.

A method to control data collection, comprising:

• during a workflow in which a client device is seeking access to a protected endpoint, receive a request to fetch a data collection script, the request including a first set of signals associated with the client device;
• in response to the request, and based at least in part on a temporal function, generate a custom data collection script for the workflow, the custom data collection script including a second set of signals;
• return the script;
• following return of the custom data collection script, receive telemetry from the client device, the telemetry including data having been collected at the client device based on runtime execution of the custom data collection script;
• and
• based at least in part on the telemetry, enable access to a protected endpoint.