FIELD: computer technology.
SUBSTANCE: invention relates to computer technology. The method for detecting abnormal activity when users interact with remote services contains stages at which signs of user activity are detected when users interact with remote services during a given time interval using a script executed in a browser on users’ computing devices when a user interacts with a remote service web page; with the help of the security service, based on the identified signs of user activity, the activities of each user corresponding to a certain scenario of user activity are identified; with the help of the security service, the degree of anomaly of user activity corresponding to the user activity scenario in a given time interval is calculated; with the help of the security service, abnormal user activity is detected.
EFFECT: ensuring the detection of abnormal activity when users interact with remote services.
6 cl, 3 dwg
