Method and system for preventing operating system detection
AssigneeCisco Technology, Inc.
InventorsJames Aviani, Jean-Philippe Champagne, Matthew Gnagy, Michael Hall, Ravishankar Ithal
Life of this patent
Estimating the term…
Abstract
A method and system for preventing the detection of an operating system by an intruder, the operating system installed on a host in a network, is provided. The intruder transmits a network probe for operating system detection. The network probe is identified and a response is generated to the network probe, generated by the operating system, is modified. The modified response provides the intruder with false information related to the operating system, thereby misleading the intruder about the type of operating system.
Claims30
A method for preventing detection of an operating system on a network by an intruder, the intruder transmitting a network probe for the operating system detection, the operating system installed on a host in a computer network, the method comprising
- identifying the network probe;
- and
- modifying a response to the network probe generated by the operating system, wherein the modified response provides false information related to the operating system.
A system for preventing the detection of an operating system on a network by an intruder, the intruder transmitting a network probe for the operating system detection, the operating system installed on a host in a computer network, the system comprising
- a network probe identifier for identifying the network probe;
- and
- a response modifier for modifying a response to the network probe generated by the operating system, wherein the modified response provides false information related to the operating system.
A system for preventing the detection of an operating system on a network by an intruder, the intruder transmitting a network probe for the operating system detection, the operating system installed on a host in a computer network, the system comprising
- means for identifying the network probe;
- and
- means for modifying a response to the network probe generated by the operating system, wherein the modified response provides false information related to the operating system.
An apparatus for preventing the detection of an operating system on a network by an intruder, the intruder transmitting a network probe for the operating system detection, the operating system installed on a host in a computer network, the apparatus comprising
- a processing system including a processor coupled to a display and user input device;
- a machine-readable medium including instructions executable by the processor comprising
- one or more instructions for identifying the network probe;
- and
- one or more instructions for modifying a response to the network probe generated by the operating system, wherein the modified response provides false information related to the operating system.
A machine-readable medium including instructions executable by the processor for preventing the detection of an operating system on a network by an intruder, the intruder transmitting a network probe for the operating system detection, the operating system installed on a host in a computer network, the machine-readable medium comprising
- one or more instructions for identifying the network probe;
- and
- one or more instructions for modifying a response to the network probe generated by the operating system, wherein the modified response provides false information related to the operating system.
Dependencies are inferred from the claim text.