Remote desktop access to a target machine

1. A system, comprising:

at least one non-transitory computer readable storage medium storing instructions; and

at least one processor configured to execute said instructions to:

establish, in response to a request received from a client application for remote desktop access to a target application, a connection session of a remote desktop access connection with said client application over a network, said client application being associated with one or more credentials;

acquire from said client application, using said remote desktop access connection, information pertaining to a system environment of said client application during said connection session;

analyze said acquired information by comparing said acquired information to information indicative of a defined use of said client application;

detect, based on said analyzing, suspicious activity associated with at least one of said client application, a user associated with said client application, or an account associated with said client application, wherein the detecting is independent of a validity of the one or more credentials;

generate an assessment of a risk measure of said remote desktop access connection session; and

perform, based on the detected suspicious activity or the risk measure, at least one control action.

2. A system according to claim 1 , wherein said analyzing comprises determining a configuration of said client application based on said acquired information.

3. A system according to claim 1 , wherein said acquired information comprises information indicative of at least one setting of an operating system associated with said client application.

4. A system according to claim 1 , wherein said acquired information comprises information indicative of a user-specific setting of said client application.

5. A system according to claim 1 , wherein said acquired information comprises information indicative of a connection setting pertaining to said client application for said connection session.

6. A system according to claim 1 , wherein said acquired information comprises information indicative of a screen resolution of said client application.

7. A system according to claim 1 , wherein said acquired information comprises information indicative of a language setting for said client application.

8. A system according to claim 1 , wherein said acquired information comprises information indicative of a parameter effecting visual display characteristics of said client application.

9. A system according to claim 1 , wherein said acquired information comprises information indicative of a process executing on said client application.

10. A system according to claim 1 , wherein said acquired information comprises information indicative of an application running on said client application.

11. A system according to claim 1 , wherein said acquired information comprises information indicative of peripheral equipment associated with said client application.

12. A system according to claim 1 , wherein the control action governs actions performed by said client application on said target application during said connection session.

13. A system according to claim 1 , wherein said acquiring comprises extracting said information from messages received from said target application over said remote desktop access connection.

14. A system according to claim 1 , wherein said acquiring comprises invoking a data transfer between said client application and said target application via said remote desktop access connection.

15. A system according to claim 1 , wherein said acquiring comprises invoking a data transfer between said client application and a remote server in connection with said target application.

16. A system according to claim 1 , wherein said processor is further configured to execute said instructions to verify, based on said generated assessment and according to said acquired information, a client application on said client application which initiated said request for said remote desktop access connection.

17. A system according to claim 1 , wherein said at least one processor is further configured to forward said request for the remote desktop access connection to a target application.

18. A method for assessing a risk of a remote desktop access connection session, comprising:

executing, by at least one hardware processor, program instructions to:

establish, in response to a request received from a client application for remote desktop access to a target application, a connection session of a remote desktop access connection with said client application over a network, said client application being associated with one or more credentials;

acquire from said client application, using said remote desktop access connection, information pertaining to a system environment of said client application during said connection session;

analyze said acquired information by comparing said acquired information to information indicative of a defined use of said client application;

detect, based on said analyzing, suspicious activity associated with at least one of said client application, a user associated with said client application, or an account associated with said client application, wherein the detecting is independent of a validity of the one or more credentials;

generate an assessment indicative of a risk measure of said connection session; and

perform, based on the detected suspicious activity or the risk measure, at least one control action.

19. A method according to claim 18 , wherein said analyzing comprises determining a configuration of said client application based on said acquired information.

20. A method according to claim 18 , wherein the control action governs actions performed by said client application on said target application during said connection session.

21. A method according to claim 18 , wherein said acquiring comprises extracting said information from messages received from said target application over said remote desktop access connection.

22. A method according to claim 18 , wherein said acquiring comprises invoking a data transfer between said client application and said target application via said remote desktop access connection.

23. A method according to claim 18 , wherein said acquiring comprises invoking a data transfer between said client application and a remote server in connection with said target application.

24. A method according to claim 18 , further comprising verifying, based on said generated assessment and according to said acquired information, said client application.

25. A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for assessing a risk measure of a remote desktop access connection, said operations comprising:

establishing, in response to a request received from a client application for remote desktop access to a target application, a connection session of a remote desktop access connection with said client application over a network, said client application being associated with one or more credentials;

acquiring from said client application, using said remote desktop access connection, information pertaining to a system environment of said client application during said connection session;

analyzing said acquired information by comparing said acquired information to information indicative of a defined use of said client application;

detecting, based on said analyzing, suspicious activity associated with at least one of said client application, a user associated with said client application, or an account associated with said client application, wherein the detecting is independent of a validity of the one or more credentials;

generating an assessment of a risk measure of said remote desktop access connection session; and

performing, based on the detected suspicious activity or the risk measure, at least one control action.