Device, system, and method of detecting hardware components
Devices, systems, and methods of detecting user identity, differentiating between users of a computerized service, and detecting a possible attacker. The methods include monitoring of user-side input-unit interactions, in general and in response to an interference introduced to user-interface elements. The monitored interactions are used for detecting an attacker that utilizes a remote access channel; for detecting a malicious automatic script, as well as malicious code injection; to identify a particular hardware assembly; to perform user segmentation or user characterization; to enable a visual login process with implicit two-factor authentication; to enable stochastic cryptography; and to detect that multiple users are utilizing the same subscription account.
1. A process comprising:
(A) monitoring user-side keyboard interactions of a keyboard which is being used for interacting with a computerized service;
(B) extracting from said user-side keyboard interactions a keyboard hardware-specific characteristic that is revealed from an analysis of the monitored user-side keyboard interactions;
(C) based on the extracted keyboard hardware-specific characteristic, that is revealed from said analysis of the monitored user-side keyboard interactions, differentiating between (I) a first usage session in which a first type of keyboard is utilized, and (II) a second usage session in which a second, different, type of keyboard is utilized,
wherein the extracting of step (B) and the differentiating of step (C) are performed by:
(I) displaying through said computerized service a challenge requesting a user to correctly type a unique character that exists in a first model of physical keyboard that does not exist in a second, different, model of physical keyboard, and
(II) determining a type of physical keyboard that is utilized by said user, based on whether or not said user successfully typed said unique character.
2. The process of claim 1 , wherein the extracting of step (B) and the differentiating of step (C) are performed by identifying in at least one of said first and second usage sessions, a particular sequence of characters that a particular type of keyboard enables to manually type faster than other types of keyboards.
3. The process of claim 1 , wherein the extracting of step (B) and the differentiating of step (C) are performed by identifying in at least one of said first and second usage sessions, a particular character that a particular type of keyboard enables to manually type faster than other types of keyboards.
4. The process of claim 1 , wherein the extracting of step (B) and the differentiating of step (C) are performed by:
(I) displaying through said computerized service a challenge requesting a user to correctly type an accented character, and
(II) determining a type of keyboard that is utilized by said user, based on whether or not said user successfully typed said accented character.