Back to results
US 11,700,276 B1Granted
Controlled deployment of blended honeypot services
AssigneeRapid7, Inc.
InventorsRoy Hodgman, Derek Abdine
Life of this patent
Estimating the term…
Abstract
Methods and systems for monitoring activity on a network. The systems may include a host computer executing a non-honeypot service. The host computer may also include a control module configured to enable or disable a honeypot service on the host computer in response to at least one of computational resource availability and configured tolerance for degraded service.
Claims18
A system comprising:
- a first host on a network configured to:
- execute a production service;
- and
- execute a honeypot service used to monitor activity on the network;
- wherein the first host implements a control module configured to execute instructions stored on a memory to:
- determine to deploy the honeypot service on a second host in an isolated environment on the network;
- determine an amount of resources required for executing the honeypot service on the second host to reduce a communication latency between the first host and the second host that differentiates responses by the first host and the second host, wherein the amount of resources is determined based on a service protocol of the honeypot service;
- cause the second host to be configured with the required amount of resources and the honeypot service to be deployed on the second host;
- and
- forward traffic directed to the honeypot service to the second host to prevent a malicious actor from accessing the production service on the first host.
7 more elements
A method comprising:
- performing, by a first host on a network:
- executing a production service on the first host;
- executing a honeypot service on the first host used to monitor activity on the network;
- and
- executing a control module on the first host, comprising:
- determining to deploy the honeypot service on a second host in an isolated environment on the network;
- determining an amount of resources required for executing the honeypot service on the second host to reduce a communication latency between the first host and the second host that differentiates responses by the first host and the second host, wherein the amount of resources is determined based on a service protocol of the honeypot service;
- causing the second host to be configured with the required amount of resources and the honeypot service to be deployed on the second host;
- and
- forwarding traffic directed to the honeypot service to the second host to prevent a malicious actor from accessing the production service on the first host.
7 more elements
Dependencies are inferred from the claim text.