Cyber attack disruption through multiple detonations of received payloads

An apparatus comprising:

• a network accessible device comprising a processor and memory;
• and
• a security system associated with the network accessible device comprising a security controller, a front end and a decoy environment operationally isolated from the memory of the network accessible device, wherein the security controller is adapted to, responsive to receipt of a payload as a software code element from an outside source potentially having a malicious component from an attacking party, sequentially apply a security operation to the payload to evaluate the payload, load at least one first copy of the payload into a memory of the decoy environment and detonate the at least one first copy of the payload a plurality of times in succession within the decoy environment to activate the at least one first copy of the payload using one or more associated software applications stored in the memory of the decoy environment, and allow a second copy of the payload to be forwarded, via the network accessible device, to an end user device of an intended recipient for the payload, the end user device coupled to the network accessible device, the security system continuing to detonate the at least one first copy of the payload within the decoy environment after said forwarding of the second copy of the payload to the end user device, wherein the first copy of the payload is repetitively detonated within the decoy environment by being opened, executed or launched at least M+N times where M and N are each a plural number, and wherein the at least one first copy of the payload is detonated said M times prior to execution of the second copy of the payload by the end user device and the at least one first copy of the payload is detonated said N times after execution of the second copy of the payload by the end user device.