System and method for detecting a proxy between a client and a server
View Patent ↗A method and system for determining whether a proxy is present in a communication link between a client and a server, and if so, certain characteristics of the proxy.
1. A method comprising:
sending, by a computer, over a communication network, a request to a source address, said request including an instruction to perform an action that generates an error message, and an instruction to send data of a time measured at a client between a performance of said action and a generation of said error message; and
determining, by said computer, based on a response to said request whether said source address is associated with a proxy.
2. The method as in claim 1 , wherein said sending said request comprises
sending said request over a plurality of ports; and
monitoring said plurality of ports for said response.
3. The method as in claim 1 , wherein said determining whether said source address is a proxy comprises determining whether said response is a refusal of said source address to perform said action.
4. The method as in claim 1 , wherein said request comprises a random variable.
5. The method as in claim 1 , comprising refusing to perform an instruction received from said source address upon determining that said source address is a proxy.
6. The method as in claim 1 , comprising receiving an initial request from said source address.
7. A method comprising:
measuring, by a computer, a response time to an instruction sent over a communication network to a request source address, said request including an instruction to perform an action that generates an error message, and an instruction to send data of a time measured at a client between a performance of said action and a generation of said error message; and
determining, by the computer, based on said response time whether said request source address is a proxy.
8. The method as in claim 7 , comprising calculating, by the computer, a time elapsed between said performance of said action and said generation of said message, and wherein determining whether said request source address is a proxy comprises comparing a result of said calculation to an estimate of a time required for a client to request a proxy to perform said action and to receive said error message in response to said request.
9. The method as in claim 8 , comprising determining, by the computer, a distance of said proxy from said request source address based on said response time.
10. A system comprising a processor linked to a network, said processor to send a request to a request source address, said request including an instruction to perform an action that generates an error message, and an instruction to send data of a time measured at a client between a performance of said action and a generation of said error message; and determine from a response to said request that said request source address is a proxy.
11. The system as in claim 10 , wherein said processor is to transmit said request over a plurality of ports and to monitor said plurality of ports for said response.
12. The system as in claim 11 , wherein said processor is to include in said request an instruction to retrieve a resource.
13. The system as in claim 10 , wherein said processor is to determine that said response is a refusal of said request source address to perform an action.
14. The system as in claim 10 , wherein said processor is to insert a random variable into said request.
15. An article comprising a non-transitory computer-readable storage medium, having stored thereon commands that when executed by a processor result in measuring a response time to an instruction sent to a request source address, said request including an instruction to perform an action that generates an error message, and an instruction to send data of a time measured at a client between a performance of said action and a generation of said error message, and determining whether said request source address is a proxy.
16. The article as in claim 15 , wherein said commands when executed result in calculating a time elapsed between said performance of said action and said generation of said message, and determining whether said request source address is a proxy by comparing a result of said calculation to an estimate of a time required for a client to request a proxy to perform said action and to receive said error message in response to said request.
17. The article as in claim 15 , wherein said commands when executed result in determining if said proxy is close to said request source address based on said response time.