Methods and systems for deceptively trapping electronic worms
AssigneeAT&T Intellectual Property I, L.P.
InventorJeffrey Aaron
Life of this patent
Estimating the term…
Abstract
Methods of trapping electronic worms are provided. Pursuant to these methods, an electronic worm may be “trapped” such that its ability to spread is reduced or eliminated, while at the same time the worm is deceived such that it does not realize it has been trapped. In this manner, the probability that the worm enacts countermeasures that are harmful to the data and/or equipment of the infected computing devices may be reduced. Corresponding systems of trapping electronic worms are also provided.
Claims20
A method of trapping an electronic worm, the method comprising:
- detecting the electronic worm in an infected computer;
- trapping the electronic worm;
- and then
- communicating with the trapped electronic worm.
A method of blocking a communications from an electronic worm, the method comprising:
- detecting a probe sent by the electronic worm;
- blocking the probe from reaching an intended destination;
- generating or formulating a response to the probe;
- and
- forwarding the response to the probe to the electronic worm.
A system for trapping an electronic worm, comprising:
- a probe detector that is configured to detect a probe from the electronic worm;
- a database containing information on probe characteristics of a plurality of known types of worms;
- a probe analyzer that is coupled to the probe detector and to the database;
- a worm communications interceptor that is responsive to the probe analyzer and that is configured to intercept the probe to prevent it from reaching an intended destination;
- and
- a deceptive-responder that is responsive to the worm communications interceptor.
Dependencies are inferred from the claim text.