Non-blocking automated agent detection

1. A computer-implemented method, comprising:

under the control of one or more computer systems including one or more hardware processors and configured with executable instructions,

receiving a request for a webpage;

processing the request at a rendering service of a service provider remotely located from a requestor by at least:

obtaining a security check to be used to distinguish humans from automated agents; and

configuring the webpage such that the security check is presented in a modal pop-up box of the webpage, and such that:

the webpage includes one or more uniform resource locators, separate from the modal pop-up box, that are obfuscated for selection by a human user without clearing the modal pop-up box, and

the automated agents fail to detect computer executable instructions that activate the modal pop-up box of the webpage and thereby select the one or more uniform resource locators without interacting with the modal pop-up box to perform the security check; and

transmitting the webpage in response to the request.

2. The computer-implemented method of claim 1 , wherein the computer-implemented method further includes:

receiving an indication of an interaction with the webpage; and

updating a collection of signatures based at least in part on the indication.

3. The computer-implemented method of claim 1 , wherein configuring the webpage includes configuring the webpage such that the webpage lacks uniform resource locators linking to information for which successful solution to the security check is required.

4. The computer-implemented method of claim 1 , wherein the computer-implemented method further includes:

receiving an indication of an interaction with the webpage, the indication indicating interaction with the webpage during presentation of the modal pop-up box without submission of a solution to the security check; and

updating a collection of signatures to increase a confidence level of a particular signature associated with the indication, based at least in part on the indication.

5. A system, comprising:

at least one computing device configured to implement one or more services, wherein the one or more services are configured to:

receive a request to access one or more resources of a service provider remotely located from a requestor of the request;

determine, in response to the request, a response to the request that includes a security check, the response including one or more references to information, wherein selection of the one or more references is required for accessing the one or more services, the one or more references being unselectable by a user during presentation of the security check, the one or more references being selectable in the webpage by an automated agent, and the security check being configured to cause the automated agent to ignore the security check in response to the presentation of the security check;

transmit the response, as determined, to the request;

at a time after transmitting the response to the request, make a determination whether the security check has been interacted with; and

perform one or more actions based at least in part on the determination.

6. The system of claim 5 , wherein the one or more services are further configured to:

receive a second request including a solution to the security check; and

transmit a cookie in response to the second request regardless of whether the solution to the security check indicates automated agent activity, where the cookie is configured to allow access to the one or more resources of the service provider.

7. The system of claim 6 , wherein the determination of whether the security check has been interacted with is based at least in part on the second request.

8. The system of claim 5 , wherein the response is further configured to include one or more references to information that are unselectable by the user during presentation of the security check includes configuring the response to include a modal pop-up box containing the security check.

9. The system of claim 5 , wherein making the determination is based at least in part on receiving a second request referencing at least one of the references to information of the one or more references to information.

10. The system of claim 5 , wherein the at least one computing device configured to implement one or more services is further configured to:

tag the received request based at least in part on a collection of signatures; and

call a policy service responsible for determining to include the security check in the response to the request.

11. The system of claim 5 , wherein performing the one or more actions includes updating an automated agent detection model or a human user detection model based at least in part on the determination of whether the security check was interacted with during presentation of the security check.

12. The system of claim 5 , wherein determining to include the security check in the response to the request is based at least in part on a test to determine a false positive rate of one or more automated agent detection models.

13. A non-transitory computer-readable storage medium having stored thereon executable instructions that, when executed by one or more processors of a computer system, cause the computer system to at least:

receive a request;

transmit a response to a requestor of the request, the response being configured such that when rendered, the response provides a user interface that includes a security check and one or more references to information that are unselectable by a non-automated agent using the provided user interface as a result of the security check being present in the provided user interface, and the one or more references to information are selectable, via the provided user interface, by an automated agent without automated agent interaction with the security check whose presentation renders the one or more references unselectable by the non-automated agent;

receive data indicating whether an interaction was performed with the security check;

if the received data indicates that the interaction with the one or more references to information was performed with the security check, determine that the requestor is the non-automated agent;

if the received data indicates that the interaction with the one or more references to information was performed without the security check, determine that the requestor is the automated agent; and

update a signature list based at least in part on whether the interaction was performed.

14. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions that cause the computer system to transmit the response to the request including the security check further include instructions that cause the computer system to configure the response such that the security check is displayed in a modal manner.

15. The non-transitory computer-readable storage medium of claim 14 , wherein the instructions that cause the computer system to receive data indicating whether the interaction was performed with the security check further include instructions that cause the computer system to receive data indicating the interaction was causing a modal pop-up box to be closed.

16. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions that cause the computer system to update the signature list further include instructions that cause the computer system to increase a confidence level that a particular signature is associated with the automated agent.

17. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions that cause the computer system to update the signature list further include instructions that cause the computer system to increase a confidence level that an IP address associated with a particular signature in the signature list is associated with the automated agent.

18. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions that cause the computer system to update the signature list further include instructions that cause the computer system to associate a cookie with a particular signature in the signature list.

19. The non-transitory computer-readable storage medium of claim 13 , wherein the instructions that cause the computer system to receive the request further include instructions that cause the computer system to receive a cookie included in the request, where the cookie is associated with a solution of a particular security check.

20. The non-transitory computer-readable storage medium of claim 19 , wherein the instructions further comprise instructions that, when executed by the one or more processors, cause the computer system to detect automated agent activity based at least in part on the cookie included in the request.