Patent ID: 8763120
Filing Date: 2014-06-24
Classification: G06F,H04L

Abstract:
1. A computer implemented method, comprising: receiving a browser request from a client device; determining whether the request includes tracer data in other than a first parameter type, wherein the tracer data is generated by a proxy node in a distributed security system based on data being received from a resource location associated with the browser request for detecting an exploitation attack, wherein the tracer data is generated subsequently from receiving the browser request by the proxy node based on a web page response from a valid server, and wherein the tracer data is not generated by the client device or the resource location associated with the browser request and is selected to be a string which is unlikely to be repeated in cookies provided by resource locations along with an associated domain name both combined in a name value pair of a cookie; providing the tracer data to the client device from the proxy node; and if the request is determined to include the tracer data in a parameter type other than the first parameter type, then initiating a security process by the distributed security system at the proxy node comprising sending a warning to the client device and one of blocking a source of the malicious code or denying the browser request.