METHOD AND SYSTEM FOR PREVENTING MALICIOUS AUTOMATED ATTACKS Russian patent published in 2020 - IPC G06F21/50 G06F21/60 H04L29/06 

FIELD: physics.

SUBSTANCE: invention relates to a method and a system for preventing malicious automated attacks. Method comprises evaluating user based on obtained request to computer system on session, performing collection of numerical and statistical metrics of request, count of metrics that characterize user based on statistics of its communication with resource, determination of metrics based on common statistics on resource, indicating deviation of user session from median and middle session, on the basis of these data, evaluation of legitimacy of request by means of statistical model, based on which user is determined to one of categories of legitimate, suspicious or bot, for legitimate user is granted access to resource, for a bot - blocking access to a resource, performing additional checking with respect to a suspicious user, while on the basis of analysing its behaviour, it is presented with a task using cryptographic algorithms using asymmetric encryption, in case of absence of the correct solution of the task, it is defined as a bot and blocked access to the resource; in case of the correct solution, it is identified as a legitimate user and access is granted.

EFFECT: technical result is to ensure prevention of malicious attacks.

14 cl, 3 dwg