Abstract: Systems, methods, apparatuses, and computer program products for analyzing malware traffic with direct malware detonation. The method may include, retrieving a data package from a source database. The method may also include invoking an auto tester to generate an indicator on the data package. The method may further include installing, in response to the invocation, the data package on a user equipment. In addition, the method may include triggering malicious behavior on the user equipment. Further, the method may include implementing an emulation of at least one user event on the data package during the malicious behavior. The method may also include extracting a uniform resource locator, a header, or a request body generated by the user equipment.

Abstract: Systems, methods, apparatuses, and computer program products for analyzing malware traffic with direct malware detonation. The method may include, collecting page data of a website, and information of a user request. The method may also include generating an algorithm and a baseline of authorized activity with the collected page data and the information of the user request. In addition, the method may include establishing legitimacy of the user request based on the algorithm and the baseline. Further, the method may include controlling access to a web application based on the legitimacy of the user request.

Abstract: Systems, methods, apparatuses, and computer program products for human or bot activity detection. The method may include, collecting time-series data on one or more events occurring on a webpage. The method may also include deriving classifications of the one or more events. The method may further include performing functional transformations of the time-series data. In addition, the method may include determining potential features of the one or more events based on a combination of the classifications of the one or more events, and results of the functional transformation. Further, the method may include training a machine learning model with the potential features. The method may also include determining, via the machine learning model, bot behavior and non-bot behavior of the one or more events.

Abstract: Systems, methods, apparatuses, and computer program products for online form logging malicious or bot activity detection. The method may include, initiating an event logging procedure on a webpage. The method may also include listening to one or more event types via the form detection procedure on the webpage. The method may further include measuring a timing between each of the one or more events. In addition, the method may include aggregating the one or more events and the timing between each of the one or more events into an array. Further, the method may include transmitting the array to a server device to determine, based on the array, whether there is human activity or bot activity.

Abstract: Systems, methods, apparatuses, and computer program products for human or bot activity detection. The method may include, collecting time-series data on one or more events occurring on a webpage. The method may also include deriving classifications of the one or more events. The method may further include performing functional transformations of the time-series data. In addition, the method may include determining potential features of the one or more events based on a combination of the classifications of the one or more events, and results of the functional transformation. Further, the method may include training a machine learning model with the potential features. The method may also include determining, via the machine learning model, bot behavior and non-bot behavior of the one or more events.