Generating a honey network configuration to emulate a target network environment
AssigneePalo Alto Networks, Inc.
InventorsRobert A. Seger, John Harrison
Life of this patent
Estimating the term…
Abstract
Techniques for generating a honey network configuration to emulate a target network environment are disclosed. In some embodiments, techniques for generating a honey network configuration to emulate a target network include receiving a network scan survey of the target network; generating the honey network configuration to emulate the target network using the network scan survey of the target network; and executing a honey network using the honey network configuration.
Claims28
(canceled)
A system, comprising:
- a processor configured to:
- receive a probe from a scanning tool sent to an IP address that is in a honey network, wherein the honey network includes a trigger table based on a honey network configuration for emulating a target network;
- generate a response to the probe using the trigger table based on the honey network configuration;
- and
- send the response to the scanning tool, wherein the scanning tool is unable to detect that the response is associated with an emulated device and/or an emulated service in the honey network;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- receiving a probe from a scanning tool sent to an IP address that is in a honey network, wherein the honey network includes a trigger table based on a honey network configuration for emulating a target network;
- generating a response to the probe using the trigger table based on the honey network configuration;
- and
- sending the response to the scanning tool, wherein the scanning tool is unable to detect that the response is associated with an emulated device and/or an emulated service in the honey network.
A computer program product, the computer program product being embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
- receiving a probe from a scanning tool sent to an IP address that is in a honey network, wherein the honey network includes a trigger table based on a honey network configuration for emulating a target network;
- generating a response to the probe using the trigger table based on the honey network configuration;
- and
- sending the response to the scanning tool, wherein the scanning tool is unable to detect that the response is associated with an emulated device and/or an emulated service in the honey network.
Dependencies are inferred from the claim text.