Patent · US Active

Context-aware knowledge system and methods for deploying deception mechanisms

US9853999B2 · kind B2 · utility

9Cited by
1References
20Claims
0Family size

Assignee

Inventors

Key dates

Filing dateFeb 3, 2017
Grant dateDec 26, 2017
Priority date
Expiry dateFeb 3, 2037

Classification

  • Technology area (CPC H)Electricity
  • CPC primaryH04L63/1425
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Methods, systems, and computer-readable mediums are described herein to provide context-aware knowledge systems and methods for deploying deception mechanisms. In some examples, a deception profiler can be used to intelligently deploy the deception mechanisms for a network. For example, a method can include identifying a network for which to deploy one or more deception mechanisms. In such an example, a deception mechanism can emulate one or more characteristics of a machine on the network. The method can further include determining one or more asset densities and a summary statistic. An asset density can be associated with a number of assets connected to the network. The summary statistic can be associated with a number of historical attacks on the network. Using at least one or more of the one or more asset densities, the summary statistic, other information associated with the network, or a combination thereof, the method can further include determining a number of deception mechanisms to deploy, and deploying the number of deception mechanisms.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.