SYSTEM AND A METHOD FOR IDENTIFYING THE PRESENCE OF MALWARE AND RANSOMWARE USING MINI-TRAPS SET AT NETWORK ENDPOINTS

摘要

A system and a method for identifying the presence of ransomware on a network including a plurality of resources, and for trapping the ransomware therein.

主权项

1. A system for identifying the presence of malware on a network, comprising:
a plurality of resources, interconnected to form a network; at least one decoy drive; at least one mini-trap installed on at least one of said plurality of resources and functionally associated with at one of said at least one decoy drive, said at least one mini-trap comprising deceptive information directing ransomware accessing said at least one mini-trap to said decoy drive associated therewith; and a manager node forming part of said network and configured to manage placement of said at least one mini-trap on said at least one of said plurality of resources and association between said at least one mini-trap and said decoy drive associated therewith.