1. A method for identifying a compromised client device from a masquerading device, the method comprising: capturing a plurality of attributes from a network device connecting to a web service, each of the attributes representing a parameter, the plurality of parameters uniquely identifying the network device from a plurality of other networks devices; maintaining the network device substantially free from any software programs associated with the capturing of the plurality of attributes; and determining if the network device is compromised.