Patent Document ID: 9516004
Application ID: 13928215

Base Claim:
1. A system, comprising: a non-transitory memory storing a list of common credentials; a network interface component, configured to receive a credential associated with a user authentication attempt; and one or more hardware processors configured to execute instructions to cause the system to perform operations comprising: determining if the received credential is correct; comparing the received credential to the list of common credentials when the received credential is not correct; and when the received credential matches a common credential on the list of common credentials: increasing a score by a weighted factor based on the received credential matching the common credential, wherein increasing the score indicates an increased likelihood that an attacker is entering common credentials in a horizontal attack in order to gain access to a user account; storing a time associated with the score increase; and making a security determination based on the score; wherein the weighted factor is lower when a time since a previous score increase is greater than a threshold time than when the time since the previous score increase is less than or equal to the threshold time.

---

Claim 4:
4. The system of claim 1 , wherein the operations further comprise increasing a score associated with a user authentication attempt.