1. A method for validating devices in a network, the method comprising: receiving data at a server, the received data generated by one or more devices as part of network interaction; passively monitoring the data received from the one or more devices at the server, wherein passive monitoring does not require the one or more devices to execute instructions specifically for validation; determining that data associated with a device from the one or more devices indicates use of an illicit peripheral device; and invalidating the determined device for further network interaction based on the indicated use of the illicit peripheral.