Patent attributes
Techniques to facilitate passive detection of forged web browsers are disclosed herein. In at least one implementation, security information transmitted by a client during Hypertext Transfer Protocol Secure (HTTPS) session establishment between a web server and the client is monitored, and header information transmitted by the client is processed to determine a type of web browser associated with the client. A security signature for the client is generated based on the security information transmitted by the client during the HTTPS session establishment. The security signature for the client is compared with a predetermined signature for the type of web browser associated with the client to determine if the client is a genuine web browser of the type of web browser associated with the client.
