Multilayered deception for intrusion detection and prevention

Patent metadata

Field	Value
Publication number	US-9392001-B2
Application number	US-201414283248-A
Country	US
Kind code	B2
Filing date	May 21, 2014
Priority date	Dec 6, 2011
Publication date	Jul 12, 2016
Grant date	Jul 12, 2016

Abstract

Concepts and technologies are disclosed herein for multilayered deception for intrusion detection. According to various embodiments of the concepts and technologies disclosed herein, a multilayer deception system includes honey servers, honey files and folders, honey databases, and/or honey computers. A multilayer deception system controller generates honey activity between the honey entities and exposes a honey profile with contact information associated with a honey user. Contact directed at the honey user and/or activity at any of the honey entities can trigger alarms and/or indicate an attack, and can be analyzed to prevent future attacks.

First claim

We claim:

1. A method comprising:
generating, by a processor executing a multilayer deception system controller application, a plurality of honey entities and an instance of honey activity associated with one honey entity of the plurality of honey entities at a private network, the plurality of honey entities including a honey profile for a honey user, the honey profile being based on a real profile of a real user, wherein the real profile comprises a first version of contact info…

Assignees

• At & T Ip I Lp

Inventors

• Wang Wei
• Shen Qi
• Forte Andrea
• Bickford Jeffrey

Classifications

• H04L63/14 Primary

  Electricity · mapped topic

• G06F21/552 Primary

  Physics · mapped topic

• G06F21/566

  Physics · mapped topic

• H04L63/1491

  Electricity · mapped topic