Injecting supplemental data into data queries at network end-points
OwnerAlmog Ohayon, Guy Franco +1inventors
InventorsAlmog Ohayon, Guy Franco, Roi Abutbul
Life of this patent
Estimating the term…
Abstract
Various embodiments pertain to techniques for injecting supplemental data into search query results delivered to an operating system. More specifically, an operating system can submit a search query to a directory server (or some other network-accessible database), and then pass results of the search query to a local proxy. The local proxy can inject supplemental data into the results. For example, the local proxy could inject bogus user account information in an effort to obfuscate an unauthorized entity who attempts to penetrate the network by parsing the results of the search query.
Claims22
A computer-implemented method, the method comprising:
- causing a deception module to be installed on a computing device within a network;
- receiving, via a processor, a data query from a sender;
- transmitting the data query to a directory server that includes a main identity database;
- receiving a response to the data query from the directory server;
- generating a supplemental information based on the response to the data query, the supplemental information representing one or more data record not found in the main identify database;
- generating a modified query response including the supplemental information representing a modified version of the response to the data query from the directory server;
- and
- transmitting the modified query response to the sender of the data query.
A system for obfuscating unauthorized users attempting to penetrate a network, the system comprising:
- an identity database configured to store a valid record used to facilitate a directory service for the network;
- and
- a deception module that stored on a computing device within the network and configured to
- receive a data query from a sender;
- transmit the data query to a directory server that includes a main identity database;
- receive a response to the data query from the directory server;
- generate supplemental information based on the response to the data query, the supplemental information representing one or more data record not found in the main identify database;
- generate a modified query response including the supplemental information representing a modified version of the response to the data query from the directory server;
- and
- transmit the modified query response to the sender of the data query.
Dependencies are inferred from the claim text.