Dynamic hiding of deception mechanism

A system comprising:

• one or more processors;
• and
• a non-transitory computer-readable medium containing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:
• identify a deception mechanism executing on a computing device, wherein a deception mechanism is associated with address information;
• determine that the deception mechanism is being projected on a site network, wherein projecting the deception mechanism on the site network includes making the address information associated with the deception mechanism visible on the site network;
• determine that an authorized network scan is about to occur on the site network;
• and
• hide the deception mechanism when it is determined that the authorized network scan is about to occur on the site network, wherein hiding includes blocking communication to or from the deception mechanism such that the address information associated with the deception mechanism is not visible on the site network while the communication is blocked, and wherein the deception mechanism continues to execute on the computing device while the deception mechanism is hidden.

A computer-program product tangibly embodied in a non-transitory machine-readable storage medium, including instructions that, when executed by the one or more processors, cause the one or more processors to:

• identify a deception mechanism executing on a computing device, wherein a deception mechanism is associated with address information;
• determine that the deception mechanism is being projected on a site network, wherein projecting the deception mechanism on the site network includes making the address information associated with the deception mechanism visible on the site network;
• determine that an authorized network scan is about to occur on the site network;
• and
• hide the deception mechanism when it is determined that the authorized network scan is about to occur on the site network, wherein hiding includes blocking communication to or from the deception mechanism such that the address information associated with the deception mechanism is not visible on the site network while the communication is blocked, and wherein the deception mechanism continues to execute on the computing device while the deception mechanism is hidden.