Methods and systems for honeyfile creation, deployment and management
AssigneePenten Pty Ltd
InventorsBen Whitham, David Liebowitz
Life of this patent
Estimating the term…
Abstract
A method for automatically creating a honeyfile for a file system, includes the steps of: surveying a file set of the file system to identify tokenisable data in the file set, tokenising the identified tokenisable data to form a plurality of token sequences, and either selecting one of the plurality of token sequences or generating a token sequence to operate as an exemplar token sequence; applying a substitution method to substitute the tokens of the exemplar token sequence with replacement tokenisable data; and packaging the replacement tokenisable data into a honeyfile.
Claims20
A method for automatically creating a honeyfile for a file system, including the steps of:
- surveying a file set of the file system to identify metadata in the file set;
- extracting the file set metadata;
- analyzing the file set metadata to resolve one or more parameters of metadata applicable to the file set;
- generating honeyfile metadata based on the resolved parameters;
- and
- packaging the honeyfile metadata into a honeyfile, wherein a frequency of extracted metadata parameters is calculated, and incidence is normalized to create occurrence probabilities.
A method for automatically creating a honeyfile for a file system, including the steps of:
- surveying a file set of a file system to identify one or more metadata in the file set;
- extracting the one or more metadata from the file set;
- storing the one or more metadata from the file set
- analyzing the file set metadata to identify one or more parameters of metadata applicable to the file set;
- generating honeyfile metadata based on the one or more identified parameters;
- associating the honeyfile metadata into a honeyfile;
- evaluating the validity of the generated honeyfile metadata;
- and
- replacing the one or more identified parameters with the generated honeyfile metadata, wherein generating honeyfile data includes creating a distribution of metadata parameter information and sampling proportional to probability.
Dependencies are inferred from the claim text.