The combination of all the parameters must be validated, e.g. if User-Agent declares Firefox, then the request must have the common for the Firefox version combination of headers and ja3 value. Using NN, HMM, LOF and other methods to build the models is TBD.