Browse Prior Art Database

Remote Access Detection Using a Crafted Captcha

IP.com Disclosure Number: IPCOM000240855D
Publication Date: 2015-Mar-06
Document File: 1 page(s) / 22K

Publishing Venue

The IP.com Prior Art Database

Abstract

In modern client-server systems, ability to determine, is client-side session is the remote session or local session, became critical for security risks calculation. Remote access Detection CAPTCHA main purpose is to add another layer of protection, that would became invisible or barely visible for any malicious actors, that conduct their activity remotely.

This text was extracted from a PDF file.
This is the abbreviated version, containing approximately 61% of the total text.

Page 01 of 1

Remote Access Detection Using a Crafted Captcha

Remote access trojans are attacks conducted in order to perform (malicious) activity on victim's machines. To carry out this activity, the fraudster would either use a legitimate remote access software installed already on the user device , or would install a malware that allow remote access white presenting a message such as "please wait for system update". Note, that most remote access tools available continuously send screenshots from the victim's device at a low resolution and a reduced colors (to save network bandwidth). Such exploits allow fraudsters to hide the malicious activity within an innocent looking machine. In this manner, the attacker hides the true IP address. Furthermore, some websites rely on browser's cookies. For example, amazon One-Click would clear a transaction without any password , based solely an identification of the user's device. A fraudster in this scenario might fool the system to believe she uses an innocent computer, exploiting a remote access mechanism.

CAPTHCHA (Completely Automated Public Turing Test to Tell Computer and Human Apart) is a technique for challenge-response test to protect systems from automating tasks such as email spam sending. Numerous implementations of CAPTHCA are available, using for example a distorted image which displays a text , which should be typed in. Whereas for a human this is a (relatively) simple image recognition task, for a computer it would requ...