Andrew J Kahn, 6613066 Maple St, Charlevoix, MI 49720

2019019, Jun 20, 2019

May 8, 2018

15/973585

- Cambridge MA, US
Andrew Kahn - San Francisco CA, US
Ory Segal - Herzliya, IL
Elad Shuster - Herzliya, IL
Duc Nguyen - Santa Clara CA, US

Akamai Technologies, Inc. - Cambridge MA

H04L 29/06
G06N 99/00
H04L 29/08

This disclosure describes a technique to fingerprint TLS connection information to facilitate bot detection. The notion is referred to herein as “TLS fingerprinting.” Preferably, TLS fingerprinting herein comprises combining different parameters from the initial “Hello” packet send by the client. In one embodiment, the different parameters from the Hello packet that are to create the fingerprint (the “TLS signature”) are: record layer version, client version, ordered TLS extensions, ordered cipher list, ordered elliptic curve list, and ordered signature algorithms list. Preferably, the edge server persists the TLS signature for the duration of a session.