Patent ID: 11877152
Assignee: BIOCATCH LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 5:
6. A system comprising:
one or more processors, that are configured to execute code;
wherein the one or more processors are operably associated with one or more memory units that are configured to store code;
wherein the one or more processors are configured to perform a process comprising:
(a) monitoring input-unit interactions of a user, who utilizes during a usage session one or more input units of an electronic device to fill-out data in a fillable form of a computerized service;
(b1) if said input-unit interactions indicate that said user utilized keyboard shortcuts for data entry or for navigation, then increasing an attack-relatedness score of said usage session;
(b2) detecting a particular average typing speed of said user in said usage session; and if said particular average typing speed matches one or more average typing speeds that are pre-defined as average typing speeds of attackers, then increasing said attack-relatedness score of said usage session;
(c) if said attack-relatedness score of said usage session is greater than a particular threshold value, then: determining that said input-unit interactions are part of an attack, and initiating one or more mitigation operations;
wherein the process further comprises:
analyzing typing activity of said user as he enters data into fields of said fillable form, and identifying a particular typing rhythm in which typing speed of said user changes across a plurality of fields of said fillable form;
based on said particular typing rhythm, distinguishing between a legitimate user and attackers.