A system for identifying Man-in-the-Browser and/or Man-in-the-Middle Internet attacks, comprising: - a Traffic Inspector in signal communication with at least one client computer having a Web browser residing therein for Internet browsing and with a Web server having a Web application residing therein, - said Traffic Inspector being configured to receive at least one request associated with said Web application from said Web browser using the HTTP or HTTPS protocol and to send said request to said Web browser using the HTTP or HTTPS protocol when it is requested by a user of said client computer via said Web browser, - said Traffic Inspector being configured to receive a request-related DOM server code from said Web server using the HTTP or HTTPS protocol, characterized in that it comprises: - a Traffic Analyzer having an algorithm application residing therein, said Traffic Analyzer being distinct from the Traffic Inspector and in signal communication with said Traffic Inspector, - said Traffic Analyzer being external to the at least one HTTP/HTTPS request received and sent by the Traffic Inspector such that said Traffic Analyzer is configured to act independently from the at least one HTTP/HTTPS request, - said Traffic Inspector being configured to add an agent code portion to said DOM server code, to thereby generate a DOM client code and send said DOM client code to said Web browser, and in that - said Traffic Inspector is configured to receive a DOM rendered code associated with said DOM client code from said Web browser, - said Traffic Inspector is configured to send at least said DOM client code and said DOM rendered code to said Traffic Analyzer. - said algorithm application residing in said Traffic Analyzer is configured to process said DOM rendered code and compare it with said DOM client code to identify at least one code difference, and it is configured to process said DOM rendered code to compare it with said DOM client code using a comparison function to generate at least one Man-in-the-Browser and/or Man-in-the-Middle attack-identification signal when said DOM client code is incompatible with said DOM rendered code. - a Traffic Inspector in signal communication with at least one client computer having a Web browser residing therein for Internet browsing and with a Web server having a Web application residing therein, - said Traffic Inspector being configured to receive at least one request associated with said Web application from said Web browser using the HTTP or HTTPS protocol and to send said request to said Web browser using the HTTP or HTTPS protocol when it is requested by a user of said client computer via said Web browser, - said Traffic Inspector being configured to receive a request-related DOM server code from said Web server using the HTTP or HTTPS protocol, - a Traffic Analyzer having an algorithm application residing therein, said Traffic Analyzer being distinct from the Traffic Inspector and in signal communication with said Traffic Inspector, - said Traffic Analyzer being external to the at least one HTTP/HTTPS request received and sent by the Traffic Inspector such that said Traffic Analyzer is configured to act independently from the at least one HTTP/HTTPS request, - said Traffic Inspector being configured to add an agent code portion to said DOM server code, to thereby generate a DOM client code and send said DOM client code to said Web browser, - said Traffic Inspector is configured to receive a DOM rendered code associated with said DOM client code from said Web browser, - said Traffic Inspector is configured to send at least said DOM client code and said DOM rendered code to said Traffic Analyzer. - said algorithm application residing in said Traffic Analyzer is configured to process said DOM rendered code and compare it with said DOM client code to identify at least one code difference, and it is configured to process said DOM rendered code to compare it with said DOM client code using a comparison function to generate at least one Man-in-the-Browser and/or Man-in-the-Middle attack-identification signal when said DOM client code is incompatible with said DOM rendered code.